AWS - SES Post Exploitation

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

SES

Kwa maelezo zaidi angalia:

AWS - SES Enum

ses:SendEmail

Tuma barua pepe.

aws ses send-email --from [e-mail] --destination file://emails.json --message file://message.json
aws sesv2 send-email --from [e-mail] --destination file://emails.json --message file://message.json

Bado kupima.

ses:SendRawEmail

Tuma barua pepe.

aws ses send-raw-email --raw-message file://message.json

Bado kupima.

ses:SendTemplatedEmail

Tuma barua pepe kulingana na kiolezo.

aws ses  send-templated-email --source <value> --destination <value> --template <value>

Bado kupima.

ses:SendBulkTemplatedEmail

Tuma barua pepe kwa marudio mengi

aws ses send-bulk-templated-email --source <value> --template <value>

Still to test.

ses:SendBulkEmail

Tuma barua pepe kwa marudio mengi.

aws sesv2 send-bulk-email --default-content <value> --bulk-email-entries <value>

ses:SendBounce

Tuma barua pepe ya kurudi juu ya barua pepe iliyopokelewa (ikiashiria kwamba barua pepe hiyo haiwezi kupokelewa). Hii inaweza kufanywa hadi masaa 24 baada ya kupokea barua pepe hiyo.

aws ses send-bounce --original-message-id <value> --bounce-sender <value> --bounced-recipient-info-list <value>

Bado kupima.

ses:SendCustomVerificationEmail

Hii itatuma barua pepe ya uthibitisho iliyobinafsishwa. Unaweza kuhitaji ruhusa pia kuunda barua pepe ya kiolezo.

aws ses send-custom-verification-email --email-address <value> --template-name <value>
aws sesv2 send-custom-verification-email --email-address <value> --template-name <value>

Bado kupima.

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Angalia mpango wa usajili!

• Jiunge na 💬 kikundi cha Discord au kikundi cha telegram au tufuatilie kwenye Twitter 🐦 @hacktricks_live.

• Shiriki mbinu za hacking kwa kuwasilisha PRs kwa HackTricks na HackTricks Cloud repos za github.