AWS - EFS Post Exploitation
Last updated
Last updated
Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)
For more information check:
AWS - EFS Enumelasticfilesystem:DeleteMountTarget
An attacker could delete a mount target, potentially disrupting access to the EFS file system for applications and users relying on that mount target.
Potential Impact: Disruption of file system access and potential data loss for users or applications.
elasticfilesystem:DeleteFileSystem
An attacker could delete an entire EFS file system, which could lead to data loss and impact applications relying on the file system.
Potential Impact: Data loss and service disruption for applications using the deleted file system.
elasticfilesystem:UpdateFileSystem
An attacker could update the EFS file system properties, such as throughput mode, to impact its performance or cause resource exhaustion.
Potential Impact: Degradation of file system performance or resource exhaustion.
elasticfilesystem:CreateAccessPoint
and elasticfilesystem:DeleteAccessPoint
An attacker could create or delete access points, altering access control and potentially granting themselves unauthorized access to the file system.
Potential Impact: Unauthorized access to the file system, data exposure or modification.
Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)