AWS - MQ Enum

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

Amazon MQ

Introduction to Message Brokers

Message brokers hutumikia kama wapatanishi, wakirahisisha mawasiliano kati ya mifumo tofauti ya programu, ambayo inaweza kujengwa kwenye majukwaa tofauti na kuandikwa kwa lugha tofauti. Amazon MQ inarahisisha uwekaji, uendeshaji, na matengenezo ya wapatanishi wa ujumbe kwenye AWS. Inatoa huduma zinazodhibitiwa kwa Apache ActiveMQ na RabbitMQ, kuhakikisha upatikanaji usio na mshono na masasisho ya toleo la programu kiotomatiki.

AWS - RabbitMQ

RabbitMQ ni programu maarufu ya message-queueing software, pia inajulikana kama message broker au queue manager. Kimsingi ni mfumo ambapo foleni zinawekwa. Programu zinawasiliana na hizi foleni ili kutuma na kupokea ujumbe. Ujumbe katika muktadha huu unaweza kubeba aina mbalimbali za taarifa, kuanzia amri za kuanzisha michakato kwenye programu nyingine (labda kwenye seva tofauti) hadi ujumbe wa maandiko rahisi. Ujumbe unashikiliwa na programu ya queue-manager hadi unapopatikana na kusindika na programu inayopokea. AWS inatoa suluhisho rahisi la kutumia kwa kuhost na kusimamia seva za RabbitMQ.

AWS - ActiveMQ

Apache ActiveMQ® ni message broker inayoongoza ya chanzo wazi, inayotegemea Java, inayojulikana kwa ufanisi wake. Inasaidia protokali nyingi za viwango vya tasnia, ikitoa ulinganifu mpana wa wateja katika lugha na majukwaa mbalimbali. Watumiaji wanaweza:

• Kuunganisha na wateja waliandikwa kwa JavaScript, C, C++, Python, .Net, na zaidi.

• Kutumia protokali ya AMQP kuunganisha programu kutoka majukwaa tofauti.

• Kutumia STOMP kupitia websockets kwa ubadilishanaji wa ujumbe wa programu za wavuti.

• Kusimamia vifaa vya IoT kwa MQTT.

• Kudumisha miundombinu ya JMS iliyopo na kupanua uwezo wake.

Uwezo na kubadilika kwa ActiveMQ hufanya iweze kutumika kwa mahitaji mengi ya ujumbe.

Enumeration

# List brokers
aws mq list-brokers

# Get broker info
aws mq describe-broker --broker-id <broker-id>
## Find endpoints in .BrokerInstances
## Find if public accessible in .PubliclyAccessible

# List usernames (only for ActiveMQ)
aws mq list-users --broker-id <broker-id>

# Get user info (PASSWORD NOT INCLUDED)
aws mq describe-user --broker-id <broker-id> --username <username>

# Lits configurations (only for ActiveMQ)
aws mq list-configurations
## Here you can find if simple or LDAP authentication is used

# Creacte Active MQ user
aws mq create-user --broker-id <value> --password <value> --username <value> --console-access

TODO: Onyesha jinsi ya kuhesabu RabbitMQ na ActiveMQ ndani na jinsi ya kusikiliza katika foleni zote na kutuma data (tuma PR ikiwa unajua jinsi ya kufanya hivi)

Privesc

AWS - MQ Privesc

Unauthenticated Access

AWS - MQ Unauthenticated Enum

Persistence

Ikiwa unajua taarifa za kuingia kwenye konsoli ya wavuti ya RabbitMQ, unaweza kuunda mtumiaji mpya mwenye mamlaka ya admin.

References

• https://www.cloudamqp.com/blog/part1-rabbitmq-for-beginners-what-is-rabbitmq.html

• https://activemq.apache.org/

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.