AWS - API Gateway Persistence

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

API Gateway

Za više informacija idite na:

AWS - API Gateway Enum

Resource Policy

Izmenite politiku resursa API gateway-a kako biste sebi omogućili pristup.

Modify Lambda Authorizers

Izmenite kod lambda autorizatora kako biste sebi omogućili pristup svim krajnjim tačkama. Ili jednostavno uklonite korišćenje autorizatora.

IAM Permissions

Ako resurs koristi IAM autorizator, možete sebi omogućiti pristup izmenom IAM dozvola. Ili jednostavno uklonite korišćenje autorizatora.

API Keys

Ako se koriste API ključevi, možete ih procuriti kako biste održali postojanost ili čak kreirati nove. Ili jednostavno uklonite korišćenje API ključeva.

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.