AWS - Accounts Unauthenticated Enum

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Angalia mpango wa usajili!

• Jiunge na 💬 kikundi cha Discord au kikundi cha telegram au fuata sisi kwenye Twitter 🐦 @hacktricks_live.

• Shiriki mbinu za udukuzi kwa kuwasilisha PRs kwa HackTricks na HackTricks Cloud repos za github.

Account IDs

Ikiwa una lengo kuna njia za kujaribu kubaini IDs za akaunti za akaunti zinazohusiana na lengo hilo.

Brute-Force

Unaunda orodha ya IDs za akaunti zinazowezekana na majina na kuziangalia.

# Check if an account ID exists
curl -v https://<acount_id>.signin.aws.amazon.com
## If response is 404 it doesn't, if 200, it exists
## It also works from account aliases
curl -v https://vodafone-uk2.signin.aws.amazon.com

You can automate this process with this tool.

OSINT

Tafuta urls ambazo zina <alias>.signin.aws.amazon.com zikiwa na alias inayohusiana na shirika.

Marketplace

Ikiwa muuzaji ana instances katika soko, unaweza kupata id ya mmiliki (account id) ya akaunti ya AWS aliyoitumia.

Snapshots

• Public EBS snapshots (EC2 -> Snapshots -> Public Snapshots)

• RDS public snapshots (RDS -> Snapshots -> All Public Snapshots)

• Public AMIs (EC2 -> AMIs -> Public images)

Errors

Ujumbe mwingi wa makosa ya AWS (hata ufikiaji umekataliwa) utaeleza hiyo taarifa.

References

• https://www.youtube.com/watch?v=8ZXRw4Ry3mQ

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.