Translated ['', 'src/pentesting-cloud/aws-security/aws-post-exploitation

src/pentesting-cloud/aws-security/aws-post-exploitation/aws-sts-post-exploitation/README.md

@@ -4,7 +4,7 @@
 
 ## STS
 
-Kwa taarifa zaidi:
+Kwa maelezo zaidi:
 
 {{#ref}}
 ../../aws-services/aws-iam-enum.md
@@ -12,11 +12,12 @@ Kwa taarifa zaidi:
 
 ### From IAM Creds to Console
 
-Ikiwa umefanikiwa kupata baadhi ya IAM credentials, unaweza kuwa na nia ya **accessing the web console** kwa kutumia zana zifuatazo.\ Kumbuka kwamba user/role lazima iwe na ruhusa **`sts:GetFederationToken`**.
+Ikiwa umefanikiwa kupata baadhi ya IAM credentials unaweza kuwa na nia ya **kuingia kwenye web console** kwa kutumia zana zifuatazo.\
+Kumbuka kwamba user/role lazima iwe na ruhusa **`sts:GetFederationToken`**.
 
-#### Skiripti maalum
+#### Skripti maalum
 
-Skiripti ifuatayo itatumia default profile na default AWS location (not gov and not cn) kukupa signed URL ambayo unaweza kutumia kuingia kwenye web console:
+Skripti ifuatayo itatumia profile ya default na eneo la default la AWS (not gov and not cn) kukupa URL iliyosainiwa ambayo unaweza kutumia kuingia ndani ya web console:
 ```bash
 # Get federated creds (you must indicate a policy or they won't have any perms)
 ## Even if you don't have Admin access you can indicate that policy to make sure you get all your privileges
@@ -54,7 +55,7 @@ echo -n "https://signin.aws.amazon.com/federation?Action=login&Issuer=example.co
 ```
 #### aws_consoler
 
-Unaweza **kutengeneza kiungo cha console ya wavuti** kwa kutumia [https://github.com/NetSPI/aws_consoler](https://github.com/NetSPI/aws_consoler).
+Unaweza **kutengeneza kiungo cha konsoli ya wavuti** kwa kutumia [https://github.com/NetSPI/aws_consoler](https://github.com/NetSPI/aws_consoler).
 ```bash
 cd /tmp
 python3 -m venv env
@@ -63,11 +64,11 @@ pip install aws-consoler
 aws_consoler [params...] #This will generate a link to login into the console
 ```
 > [!WARNING]
-> Hakikisha IAM user ana ruhusa ya `sts:GetFederationToken`, au mpe role ya kuchukua.
+> Hakikisha mtumiaji wa IAM ana ruhusa ya `sts:GetFederationToken`, au mpe role ya kujichukua.
 
 #### aws-vault
 
-[**aws-vault**](https://github.com/99designs/aws-vault) ni zana ya kuhifadhi kwa usalama na kupata AWS credentials katika mazingira ya maendeleo.
+[**aws-vault**](https://github.com/99designs/aws-vault) ni zana ya kuhifadhi kwa usalama na kufikia AWS credentials katika mazingira ya maendeleo.
 ```bash
 aws-vault list
 aws-vault exec jonsmith -- aws s3 ls # Execute aws cli with jonsmith creds
@@ -76,9 +77,13 @@ aws-vault login jonsmith # Open a browser logged as jonsmith
 > [!NOTE]
 > Unaweza pia kutumia **aws-vault** kupata **browser console session**
 
+### From Web Console to IAM Creds
+
+Kiendelezi cha kivinjari **<https://github.com/AI-redteam/clier>** kina uwezo wa kukamata IAM credentials kutoka kwenye network kabla hazijalindwa katika kumbukumbu za kivinjari.
+
 ### **Bypass User-Agent restrictions from Python**
 
-Ikiwa kuna **restriction to perform certain actions based on the user agent** inayotumika (kama kufungia matumizi ya python boto3 library kulingana na user agent) inawezekana kutumia mbinu iliyotajwa hapo juu ili **connect to the web console via a browser**, au unaweza moja kwa moja **modify the boto3 user-agent** kwa kufanya:
+Ikiwa kuna **kizuizi cha kufanya vitendo fulani kulingana na user agent** inayotumika (kama kupiga marufuku matumizi ya python boto3 library kwa misingi ya user agent) inawezekana kutumia mbinu iliyotajwa hapo juu ku**connect to the web console via a browser**, au unaweza moja kwa moja **modify the boto3 user-agent** kwa kufanya:
 ```bash
 # Shared by ex16x41
 # Create a client
@@ -93,12 +98,12 @@ response = client.get_secret_value(SecretId="flag_secret") print(response['Secre
 ```
 ### **`sts:GetFederationToken`**
 
-Kwa ruhusa hii inawezekana kuunda federated identity kwa mtumiaji anayeitekeleza, iliyozuiliwa kwa ruhusa ambazo mtumiaji huyu anazo.
+Kwa ruhusa hii inawezekana kuunda utambulisho uliounganishwa kwa mtumiaji anayekifanya, uliokwamishwa kwa ruhusa ambazo mtumiaji huyu ana.
 ```bash
 aws sts get-federation-token --name <username>
 ```
-Token iliyorejeshwa na sts:GetFederationToken inamhusu federated identity ya mtumiaji aliyeitisha, lakini ina ruhusa zilizopunguzwa. Hata kama mtumiaji ana administrator rights, vitendo vingine kama listing IAM users au attaching policies haviwezi kufanywa kupitia federated token.
+Token inayorudishwa na sts:GetFederationToken ni ya federated identity ya mtumiaji anayefanya mwito, lakini ina ruhusa zilizopunguzwa. Hata kama mtumiaji ana haki za administrator, vitendo vinginevyo kama kuorodhesha IAM users au kuambatanisha policies haviwezi kufanywa kupitia federated token.
 
-Zaidi ya hayo, njia hii ni kwa kiasi fulani ya usiri zaidi, kwa kuwa federated user haionekani kwenye AWS Portal; inaweza kuonekana tu kupitia CloudTrail logs au monitoring tools.
+Zaidi ya hayo, njia hii ni ya kimapenzi kiasi, kwani federated user haionekani kwenye AWS Portal; inaweza kuonekana tu kupitia CloudTrail logs au zana za ufuatiliaji.
 
 {{#include ../../../../banners/hacktricks-training.md}}