AWS - SNS Privesc
Last updated
Last updated
Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)
For more information check:
AWS - SNS Enumsns:PublishAn attacker could send malicious or unwanted messages to the SNS topic, potentially causing data corruption, triggering unintended actions, or exhausting resources.
Potential Impact: Vulnerability exploitation, Data corruption, unintended actions, or resource exhaustion.
sns:SubscribeAn attacker could subscribe or to an SNS topic, potentially gaining unauthorized access to messages or disrupting the normal functioning of applications relying on the topic.
Potential Impact: Unauthorized access to messages (sensitve info), service disruption for applications relying on the affected topic.
sns:AddPermissionAn attacker could grant unauthorized users or services access to an SNS topic, potentially getting further permissions.
Potential Impact: Unauthorized access to the topic, message exposure, or topic manipulation by unauthorized users or services, disruption of normal functioning for applications relying on the topic.
Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)
