mirror of
https://github.com/HackTricks-wiki/hacktricks-cloud.git
synced 2026-07-28 22:51:09 -07:00
Fix unmatched refs
This commit is contained in:
+1
-1
@@ -16,7 +16,7 @@ Github, Gitlab 또는 Bitbucket에 연결하기 위해 Codebuild에 자격 증
|
||||
따라서 비밀 관리자를 읽을 수 있는 접근 권한이 있다면 이러한 비밀을 얻고 연결된 플랫폼으로 피벗할 수 있습니다.
|
||||
|
||||
{{#ref}}
|
||||
../../aws-privilege-escalation/aws-secrets-manager-privesc.md
|
||||
../../aws-privilege-escalation/aws-secrets-manager-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### CodeBuild 리포지토리 접근 남용
|
||||
|
||||
@@ -263,25 +263,25 @@ API 키를 작동시키려면 **사용 계획**에 추가해야 하며, 이 사
|
||||
## 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum.md
|
||||
../aws-unauthenticated-enum-access/aws-api-gateway-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 권한 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-apigateway-privesc.md
|
||||
../aws-privilege-escalation/aws-apigateway-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-api-gateway-post-exploitation.md
|
||||
../aws-post-exploitation/aws-api-gateway-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 지속성
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-api-gateway-persistence.md
|
||||
../aws-persistence/aws-api-gateway-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
{{#include ../../../banners/hacktricks-training.md}}
|
||||
|
||||
+1
-1
@@ -40,7 +40,7 @@ aws cloudformation list-stack-set-operation-results --stack-set-name <name> --op
|
||||
### Persistence
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-cloudformation-persistence.md
|
||||
../aws-persistence/aws-cloudformation-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
### Post-Exploitation
|
||||
|
||||
@@ -30,13 +30,13 @@ aws cloudfront list-distributions | jq ".DistributionList.Items[] | .Id, .Origin
|
||||
## 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum.md
|
||||
../aws-unauthenticated-enum-access/aws-cloudfront-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-cloudfront-post-exploitation.md
|
||||
../aws-post-exploitation/aws-cloudfront-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
{{#include ../../../banners/hacktricks-training.md}}
|
||||
|
||||
@@ -52,7 +52,7 @@ aws codebuild describe-test-cases --report-arn <ARN>
|
||||
다음 페이지에서 **codebuild 권한을 악용하여 권한 상승**하는 방법을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-codebuild-privesc.md
|
||||
../aws-privilege-escalation/aws-codebuild-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### Post Exploitation
|
||||
@@ -64,7 +64,7 @@ aws codebuild describe-test-cases --report-arn <ARN>
|
||||
### Unauthenticated Access
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md
|
||||
../aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access/README.md
|
||||
{{#endref}}
|
||||
|
||||
## References
|
||||
|
||||
@@ -82,19 +82,19 @@ Cognito 내에서 **유효한 사용자 이름**을 **모르더라도**, **유
|
||||
## Privesc
|
||||
|
||||
{{#ref}}
|
||||
../../aws-privilege-escalation/aws-cognito-privesc.md
|
||||
../../aws-privilege-escalation/aws-cognito-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../../aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum.md
|
||||
../../aws-unauthenticated-enum-access/aws-cognito-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 지속성
|
||||
|
||||
{{#ref}}
|
||||
../../aws-persistence/aws-cognito-persistence.md
|
||||
../../aws-persistence/aws-cognito-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
{{#include ../../../../banners/hacktricks-training.md}}
|
||||
|
||||
+2
-2
@@ -28,7 +28,7 @@ aws datapipeline get-pipeline-definition --pipeline-id <ID>
|
||||
다음 페이지에서 **datapipeline 권한을 악용하여 권한 상승**하는 방법을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-datapipeline-privesc.md
|
||||
../aws-privilege-escalation/aws-datapipeline-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
## CodePipeline
|
||||
@@ -49,7 +49,7 @@ aws codepipeline get-pipeline-state --name <pipeline_name>
|
||||
다음 페이지에서 **codepipeline 권한을 악용하여 권한 상승**하는 방법을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-codepipeline-privesc.md
|
||||
../aws-privilege-escalation/aws-codepipeline-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
## CodeCommit
|
||||
|
||||
+2
-2
@@ -48,7 +48,7 @@ aws ds describe-certificate --directory-id <id> --certificate-id <id>
|
||||
### 권한 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-directory-services-privesc.md
|
||||
../aws-privilege-escalation/aws-directory-services-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 지속성
|
||||
@@ -109,7 +109,7 @@ aws workdocs add-resource-permissions --resource-id <id> --principals Id=anonymo
|
||||
### 권한 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-workdocs-privesc.md
|
||||
../aws-privilege-escalation/aws-workdocs-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
{{#include ../../../banners/hacktricks-training.md}}
|
||||
|
||||
@@ -56,25 +56,25 @@ aws dynamodb describe-endpoints #Dynamodb endpoints
|
||||
### 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access.md
|
||||
../aws-unauthenticated-enum-access/aws-dynamodb-unauthenticated-access/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 권한 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-dynamodb-privesc.md
|
||||
../aws-privilege-escalation/aws-dynamodb-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-dynamodb-post-exploitation.md
|
||||
../aws-post-exploitation/aws-dynamodb-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 지속성
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-dynamodb-persistence.md
|
||||
../aws-persistence/aws-dynamodb-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
## DynamoDB 주입
|
||||
|
||||
+6
-6
@@ -130,7 +130,7 @@ aws ec2 describe-vpc-peering-connections
|
||||
### 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../../aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum.md
|
||||
../../aws-unauthenticated-enum-access/aws-ec2-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 권한 상승
|
||||
@@ -138,7 +138,7 @@ aws ec2 describe-vpc-peering-connections
|
||||
다음 페이지에서 **EC2 권한을 악용하여 권한을 상승시키는 방법**을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../../aws-privilege-escalation/aws-ec2-privesc.md
|
||||
../../aws-privilege-escalation/aws-ec2-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 포스트 익스플로잇
|
||||
@@ -162,7 +162,7 @@ Amazon **EBS** (Elastic Block Store) **스냅샷**은 기본적으로 AWS EBS
|
||||
다음 페이지에서 **EBS 권한을 악용하여 권한을 상승시키는 방법**을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../../aws-privilege-escalation/aws-ebs-privesc.md
|
||||
../../aws-privilege-escalation/aws-ebs-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
## SSM
|
||||
@@ -191,7 +191,7 @@ ps aux | grep amazon-ssm
|
||||
다음 페이지에서 **SSM 권한을 악용하여 권한 상승**하는 방법을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../../aws-privilege-escalation/aws-ssm-privesc.md
|
||||
../../aws-privilege-escalation/aws-ssm-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### Perssistence
|
||||
@@ -199,7 +199,7 @@ ps aux | grep amazon-ssm
|
||||
다음 페이지에서 **SSM 권한을 악용하여 지속성**을 달성하는 방법을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../../aws-persistence/aws-ssm-persistence.md
|
||||
../../aws-persistence/aws-ssm-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
## ELB
|
||||
@@ -312,7 +312,7 @@ AWS VPN 클라이언트를 사용하여 VPN에 연결할 때, 사용자는 일
|
||||
#### **포스트 익스플로잇**
|
||||
|
||||
{{#ref}}
|
||||
../../aws-post-exploitation/aws-vpn-post-exploitation.md
|
||||
../../aws-post-exploitation/aws-vpn-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 참조
|
||||
|
||||
@@ -68,7 +68,7 @@ aws ecr get-repository-policy --repository-name <repo_name>
|
||||
### 인증되지 않은 열거
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum.md
|
||||
../aws-unauthenticated-enum-access/aws-ecr-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 권한 상승
|
||||
@@ -76,19 +76,19 @@ aws ecr get-repository-policy --repository-name <repo_name>
|
||||
다음 페이지에서 **ECR 권한을 남용하여 권한을 상승시키는 방법**을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-ecr-privesc.md
|
||||
../aws-privilege-escalation/aws-ecr-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-ecr-post-exploitation.md
|
||||
../aws-post-exploitation/aws-ecr-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 지속성
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-ecr-persistence.md
|
||||
../aws-persistence/aws-ecr-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 참조
|
||||
|
||||
@@ -54,7 +54,7 @@ aws ecs describe-task-definition --task-definition <TASK_NAME>:<VERSION>
|
||||
### 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum.md
|
||||
../aws-unauthenticated-enum-access/aws-ecs-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 권한 상승
|
||||
@@ -62,19 +62,19 @@ aws ecs describe-task-definition --task-definition <TASK_NAME>:<VERSION>
|
||||
다음 페이지에서 **ECS 권한을 악용하여 권한을 상승시키는 방법**을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-ecs-privesc.md
|
||||
../aws-privilege-escalation/aws-ecs-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-ecs-post-exploitation.md
|
||||
../aws-post-exploitation/aws-ecs-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 지속성
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-ecs-persistence.md
|
||||
../aws-persistence/aws-ecs-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
{{#include ../../../banners/hacktricks-training.md}}
|
||||
|
||||
@@ -214,19 +214,19 @@ get_efs_info(ip_address)
|
||||
## 프라이버시 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-efs-privesc.md
|
||||
../aws-privilege-escalation/aws-efs-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-efs-post-exploitation.md
|
||||
../aws-post-exploitation/aws-efs-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 지속성
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-efs-persistence.md
|
||||
../aws-persistence/aws-efs-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
{{#include ../../../banners/hacktricks-training.md}}
|
||||
|
||||
@@ -34,7 +34,7 @@ aws eks describe-update --name <name> --update-id <id>
|
||||
#### 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-eks-post-exploitation.md
|
||||
../aws-post-exploitation/aws-eks-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 참고 문헌
|
||||
|
||||
@@ -87,25 +87,25 @@ aws elasticbeanstalk describe-events
|
||||
### 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum.md
|
||||
../aws-unauthenticated-enum-access/aws-elastic-beanstalk-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 지속성
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-elastic-beanstalk-persistence.md
|
||||
../aws-persistence/aws-elastic-beanstalk-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 권한 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-elastic-beanstalk-privesc.md
|
||||
../aws-privilege-escalation/aws-elastic-beanstalk-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-elastic-beanstalk-post-exploitation.md
|
||||
../aws-post-exploitation/aws-elastic-beanstalk-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
{{#include ../../../banners/hacktricks-training.md}}
|
||||
|
||||
@@ -48,7 +48,7 @@ aws emr list-studios #Get studio URLs
|
||||
#### 권한 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-emr-privesc.md
|
||||
../aws-privilege-escalation/aws-emr-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 참고자료
|
||||
|
||||
@@ -213,7 +213,7 @@ steampipe dashboard
|
||||
### 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum.md
|
||||
../aws-unauthenticated-enum-access/aws-iam-and-sts-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 권한 상승
|
||||
@@ -221,19 +221,19 @@ steampipe dashboard
|
||||
다음 페이지에서 **IAM 권한을 남용하여 권한을 상승시키는 방법**을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-iam-privesc.md
|
||||
../aws-privilege-escalation/aws-iam-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### IAM 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-iam-post-exploitation.md
|
||||
../aws-post-exploitation/aws-iam-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
### IAM 지속성
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-iam-persistence.md
|
||||
../aws-persistence/aws-iam-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
## IAM 아이덴티티 센터
|
||||
@@ -340,19 +340,19 @@ external_id = 123456
|
||||
### 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum.md
|
||||
../aws-unauthenticated-enum-access/aws-identity-center-and-sso-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 권한 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-sso-and-identitystore-privesc.md
|
||||
../aws-privilege-escalation/aws-sso-and-identitystore-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-sso-and-identitystore-post-exploitation.md
|
||||
../aws-post-exploitation/aws-sso-and-identitystore-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 지속성
|
||||
|
||||
@@ -137,19 +137,19 @@ done
|
||||
### 권한 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-kms-privesc.md
|
||||
../aws-privilege-escalation/aws-kms-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-kms-post-exploitation.md
|
||||
../aws-post-exploitation/aws-kms-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 지속성
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-kms-persistence.md
|
||||
../aws-persistence/aws-kms-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 참고자료
|
||||
|
||||
@@ -143,13 +143,13 @@ aws --profile level6 --region us-west-2 apigateway get-stages --rest-api-id "s33
|
||||
다음 페이지에서 **람다 권한을 남용하여 권한을 상승시키는 방법**을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-lambda-privesc.md
|
||||
../aws-privilege-escalation/aws-lambda-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access.md
|
||||
../aws-unauthenticated-enum-access/aws-lambda-unauthenticated-access/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 포스트 익스플로잇
|
||||
|
||||
@@ -39,19 +39,19 @@ aws lightsail get-key-pairs
|
||||
### 권한 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-lightsail-privesc.md
|
||||
../aws-privilege-escalation/aws-lightsail-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-lightsail-post-exploitation.md
|
||||
../aws-post-exploitation/aws-lightsail-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 지속성
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-lightsail-persistence.md
|
||||
../aws-persistence/aws-lightsail-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
{{#include ../../../banners/hacktricks-training.md}}
|
||||
|
||||
@@ -123,7 +123,7 @@ aws macie2 get-usage-statistic
|
||||
### Privesc
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-macie-privesc.md
|
||||
../aws-privilege-escalation/aws-macie-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### Post Exploitation
|
||||
|
||||
@@ -53,13 +53,13 @@ aws mq create-user --broker-id <value> --password <value> --username <value> --c
|
||||
## Privesc
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-mq-privesc.md
|
||||
../aws-privilege-escalation/aws-mq-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum.md
|
||||
../aws-unauthenticated-enum-access/aws-mq-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 지속성
|
||||
|
||||
@@ -75,13 +75,13 @@ kafka_2.12-2.8.1/bin/kafka-console-consumer.sh --bootstrap-server $BS --consumer
|
||||
### Privesc
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-msk-privesc.md
|
||||
../aws-privilege-escalation/aws-msk-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### Unauthenticated Access
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum.md
|
||||
../aws-unauthenticated-enum-access/aws-msk-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
### Persistence
|
||||
|
||||
@@ -84,7 +84,7 @@ psql -h redshift-cluster-1.sdflju3jdfkfg.us-east-1.redshift.amazonaws.com -U adm
|
||||
## 프라이벡스
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-redshift-privesc.md
|
||||
../aws-privilege-escalation/aws-redshift-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 지속성
|
||||
|
||||
@@ -108,25 +108,25 @@ aws rds modify-db-instance --db-instance-identifier <ID> --master-user-password
|
||||
### 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum.md
|
||||
../aws-unauthenticated-enum-access/aws-rds-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 권한 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-rds-privesc.md
|
||||
../aws-privilege-escalation/aws-rds-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-rds-post-exploitation.md
|
||||
../aws-post-exploitation/aws-rds-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 지속성
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-rds-persistence.md
|
||||
../aws-persistence/aws-rds-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
### SQL 인젝션
|
||||
|
||||
@@ -23,7 +23,7 @@ aws route53 list-traffic-policies
|
||||
### 프리벡스
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer.md
|
||||
../aws-privilege-escalation/route53-createhostedzone-route53-changeresourcerecordsets-acm-pca-issuecertificate-acm-pca-getcer/README.md
|
||||
{{#endref}}
|
||||
|
||||
{{#include ../../../banners/hacktricks-training.md}}
|
||||
|
||||
@@ -241,25 +241,25 @@ Dual-stack 엔드포인트는 다음 구문을 사용합니다:
|
||||
다음 페이지에서 **S3 권한을 악용하여 권한 상승하는 방법**을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-s3-privesc.md
|
||||
../aws-privilege-escalation/aws-s3-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### Unauthenticated Access
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum.md
|
||||
../aws-unauthenticated-enum-access/aws-s3-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
### S3 Post Exploitation
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-s3-post-exploitation.md
|
||||
../aws-post-exploitation/aws-s3-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
### Persistence
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-s3-persistence.md
|
||||
../aws-persistence/aws-s3-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
## Other S3 vulns
|
||||
|
||||
@@ -30,19 +30,19 @@ aws secretsmanager get-resource-policy --secret-id --secret-id <secret_name>
|
||||
### 권한 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-secrets-manager-privesc.md
|
||||
../aws-privilege-escalation/aws-secrets-manager-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-secrets-manager-post-exploitation.md
|
||||
../aws-post-exploitation/aws-secrets-manager-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
### 지속성
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-secrets-manager-persistence.md
|
||||
../aws-persistence/aws-secrets-manager-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
{{#include ../../../banners/hacktricks-training.md}}
|
||||
|
||||
+3
-3
@@ -211,7 +211,7 @@ print("account id:" + "{:012d}".format(AWSAccount_from_AWSKeyID("ASIAQNZGKIQY56J
|
||||
자세한 정보는:
|
||||
|
||||
{{#ref}}
|
||||
../../aws-post-exploitation/aws-eks-post-exploitation.md
|
||||
../../aws-post-exploitation/aws-eks-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
### CloudTrail 구성 수정
|
||||
@@ -259,7 +259,7 @@ aws s3api put-bucket-lifecycle --bucket <bucket_name> --lifecycle-configuration
|
||||
이는 기본적으로 다음에서 설명된 **S3-KMS 랜섬웨어**입니다:
|
||||
|
||||
{{#ref}}
|
||||
../../aws-post-exploitation/aws-s3-post-exploitation.md
|
||||
../../aws-post-exploitation/aws-s3-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
**KMS 랜섬웨어**
|
||||
@@ -267,7 +267,7 @@ aws s3api put-bucket-lifecycle --bucket <bucket_name> --lifecycle-configuration
|
||||
이는 이전 공격을 수행하는 가장 쉬운 방법으로, 다른 권한 요구 사항이 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../../aws-post-exploitation/aws-kms-post-exploitation.md
|
||||
../../aws-post-exploitation/aws-kms-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
## **참고문헌**
|
||||
|
||||
+1
-1
@@ -34,7 +34,7 @@ aws controltower list-enabled-controls --target-identifier arn:aws:organizations
|
||||
### 포스트 익스플로잇 및 지속성
|
||||
|
||||
{{#ref}}
|
||||
../../aws-post-exploitation/aws-control-tower-post-exploitation.md
|
||||
../../aws-post-exploitation/aws-control-tower-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
{{#include ../../../../banners/hacktricks-training.md}}
|
||||
|
||||
@@ -115,7 +115,7 @@ aws ses get-send-statistics
|
||||
### 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-ses-post-exploitation.md
|
||||
../aws-post-exploitation/aws-ses-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
{{#include ../../../banners/hacktricks-training.md}}
|
||||
|
||||
@@ -49,25 +49,25 @@ aws sns subscribe --region <region>\
|
||||
#### 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum.md
|
||||
../aws-unauthenticated-enum-access/aws-sns-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
#### 권한 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-sns-privesc.md
|
||||
../aws-privilege-escalation/aws-sns-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
#### 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-sns-post-exploitation.md
|
||||
../aws-post-exploitation/aws-sns-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
#### 지속성
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-sns-persistence.md
|
||||
../aws-persistence/aws-sns-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 참고자료
|
||||
|
||||
@@ -23,25 +23,25 @@ aws sqs send-message --queue-url <value> --message-body <value>
|
||||
#### 인증되지 않은 접근
|
||||
|
||||
{{#ref}}
|
||||
../aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum.md
|
||||
../aws-unauthenticated-enum-access/aws-sqs-unauthenticated-enum/README.md
|
||||
{{#endref}}
|
||||
|
||||
#### 권한 상승
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-sqs-privesc.md
|
||||
../aws-privilege-escalation/aws-sqs-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
#### 포스트 익스플로잇
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-sqs-post-exploitation.md
|
||||
../aws-post-exploitation/aws-sqs-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
#### 지속성
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-sqs-persistence.md
|
||||
../aws-persistence/aws-sqs-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
## 참고 문헌
|
||||
|
||||
@@ -302,19 +302,19 @@ aws stepfunctions list-executions --map-run-arn <value> [--status-filter <RUNNIN
|
||||
다음 페이지에서 **Step Functions 권한을 악용하여 권한 상승**하는 방법을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-stepfunctions-privesc.md
|
||||
../aws-privilege-escalation/aws-stepfunctions-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
## Post Exploitation
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-stepfunctions-post-exploitation.md
|
||||
../aws-post-exploitation/aws-stepfunctions-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
## Persistence
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-step-functions-persistence.md
|
||||
../aws-persistence/aws-step-functions-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
## References
|
||||
|
||||
@@ -72,19 +72,19 @@ aws sts get-session-token --serial-number <arn_device> --token-code <otp_code>
|
||||
다음 페이지에서 **STS 권한을 악용하여 권한 상승**하는 방법을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/aws-sts-privesc.md
|
||||
../aws-privilege-escalation/aws-sts-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
### Post Exploitation
|
||||
|
||||
{{#ref}}
|
||||
../aws-post-exploitation/aws-sts-post-exploitation.md
|
||||
../aws-post-exploitation/aws-sts-post-exploitation/README.md
|
||||
{{#endref}}
|
||||
|
||||
### Persistence
|
||||
|
||||
{{#ref}}
|
||||
../aws-persistence/aws-sts-persistence.md
|
||||
../aws-persistence/aws-sts-persistence/README.md
|
||||
{{#endref}}
|
||||
|
||||
## References
|
||||
|
||||
@@ -67,7 +67,7 @@ aws scheduler list-tags-for-resource --resource-arn <schedule_group_arn>
|
||||
다음 페이지에서 **이벤트브리지 스케줄러 권한을 악용하여 권한 상승하는 방법**을 확인할 수 있습니다:
|
||||
|
||||
{{#ref}}
|
||||
../aws-privilege-escalation/eventbridgescheduler-privesc.md
|
||||
../aws-privilege-escalation/eventbridgescheduler-privesc/README.md
|
||||
{{#endref}}
|
||||
|
||||
## References
|
||||
|
||||
Reference in New Issue
Block a user