bishopfox / iam-vulnerable Goto Github PK

The command to add to the AWS credentials file currently only uses source_profile = default. This becomes a problem when you create the Terraform resources with a profile other than the default as defined in Other Use Cases. Without an understanding of the source_profile parameter, the AccessDenied error when trying to use a privesc profile could be confusing.

I manually modified each of the lines individually as I worked through the privilege escalation paths. The adjusted command below changes the lines to source_profile = nondefaultuser while also changing the account ID.

tail -n +7 aws_credentials_file_example | sed -e "s/111111111111/$(aws sts get-caller-identity | grep Account | awk -F\" '{print $4}')/g;s/default/nondefaultuser/g" >> ~/.aws/credentials

I'm not a sed expert so there could be some improvements.

I am unable to run aws cli commands as this role "privesc-cfUpdateStack"

OS, Desktop/Mobile, Browser, Date/Time,

.modules/supporting directory is missing. Init returns:

$ terraform init
Initializing modules...
- supporting in`

Error: Unreadable module directory

Unable to evaluate directory symlink: lstat modules/supporting: no such file
or directory


Error: Failed to read module directory

Module directory  does not exist or cannot be read.


Error: Unreadable module directory

Unable to evaluate directory symlink: lstat modules/supporting: no such file
or directory


Error: Failed to read module directory

Module directory  does not exist or cannot be read.

Solved by removing the following from main.tf:

module "supporting" {
  source = "./modules/supporting"
}

But I don't know how necessary the supporting folder is.