Giter Club home page Giter Club logo

awskey-iam-privescheck's Introduction

AWS IAM Privescheck

This Bash script allows you to interact with AWS Identity and Access Management (IAM) and EC2 services to check AWS credentials and permissions related to EC2 instances. It provides the following functionalities:

  1. Use AWS Credentials: Set up your AWS credentials using aws configure.
  2. Check EC2 Permission: Determine whether you have permission to create EC2 instances.
  3. List Roles for EC2 Instances: View a list of IAM roles associated with EC2 instances.
  4. List Attached Policies: Retrieve attached IAM policies for a specified IAM role.

Prerequisites

Before using this script, make sure you have the following prerequisites installed:

  • AWS CLI : Ensure you have the AWS Command Line Interface installed and configured with your AWS credentials.
  • jq : This script utilizes jq to parse JSON output from AWS CLI commands. Please install it before running the script. Install jq on gitbash curl -L -o /usr/bin/jq.exe https://github.com/stedolan/jq/releases/latest/download/jq-win64.exe

Usage

To use the script, follow these steps:

  1. Clone this repository to your local machine:
  2. git clone https://github.com/im-hanzou/awskey-iam-privescheck.git
  3. Navigate to the script's directory:
  4. cd awskey-iam-privescheck
  5. Make the script executable:
  6. chmod +x awskey-privesc.sh
  7. Run the script:
  8. ./awskey-privesc.sh

Reference

Here is the reference and the next steps for exploitation.

  • https://infosecwriteups.com/exploiting-fine-grained-aws-iam-permissions-for-total-cloud-compromise-a-real-world-example-part-5a2f3de4be08
  • https://infosecwriteups.com/exploiting-aws-iam-permissions-for-total-cloud-compromise-a-real-world-example-part-2-2-f27e4b57454e
  • Disclaimer

    This script interacts with AWS services, and improper use can result in unintended consequences. Use it responsibly, and ensure that your AWS credentials have appropriate permissions for the actions you perform.

    awskey-iam-privescheck's People

    Contributors

    im-hanzou avatar

    Recommend Projects

    • React photo React

      A declarative, efficient, and flexible JavaScript library for building user interfaces.

    • Vue.js photo Vue.js

      ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

    • Typescript photo Typescript

      TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

    • TensorFlow photo TensorFlow

      An Open Source Machine Learning Framework for Everyone

    • Django photo Django

      The Web framework for perfectionists with deadlines.

    • D3 photo D3

      Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

    Recommend Topics

    • javascript

      JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

    • web

      Some thing interesting about web. New door for the world.

    • server

      A server is a program made to process requests and deliver data to clients.

    • Machine learning

      Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

    • Game

      Some thing interesting about game, make everyone happy.

    Recommend Org

    • Facebook photo Facebook

      We are working to build community through open source technology. NB: members must have two-factor auth.

    • Microsoft photo Microsoft

      Open source projects and samples from Microsoft.

    • Google photo Google

      Google โค๏ธ Open Source for everyone.

    • D3 photo D3

      Data-Driven Documents codes.