AWS - Lightsail Enum
AWS - Lightsail
Amazon Lightsail provides an easy, lightweight way for new cloud users to take advantage of AWS’ cloud computing services. It allows you to deploy common and custom web services in seconds via VMs (EC2) and containers. It's a minimal EC2 + Route53 + ECS.
Enumeration
Analyse Snapshots
It's possible to generate instance and relational database snapshots from lightsail. Therefore you can check those the same way you can check EC2 snapshots and RDS snapshots.
Metadata
Metadata endpoint is accessible from lightsail, but the machines are running in an AWS account managed by AWS so you don't control what permissions are being granted. However, if you find a way to exploit those you would be directly exploiting AWS.
Privesc
pageAWS - Lightsail PrivescPost Exploitation
pageAWS - Lightsail Post ExploitationPersistence
pageAWS - Lightsail PersistenceLast updated