AWS - ECS Unauthenticated Enum

Support HackTricks

ECS

Kwa maelezo zaidi angalia:

Kundi la Usalama au Balancer ya Load Inayopatikana Hadharani kwa Huduma za ECS

Kundi la usalama lililo na makosa ambalo linaruhusu trafiki ya ndani kutoka kwa mtandao (0.0.0.0/0 au ::/0) kwa huduma za Amazon ECS linaweza kufichua rasilimali za AWS kwa mashambulizi.

# Example of detecting misconfigured security group for ECS services
aws ec2 describe-security-groups --query 'SecurityGroups[?IpPermissions[?contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`)]]'

# Example of detecting a publicly accessible load balancer for ECS services
aws elbv2 describe-load-balancers --query 'LoadBalancers[?Scheme == `internet-facing`]'
Support HackTricks

Last updated