mirror of
https://github.com/HackTricks-wiki/hacktricks-cloud.git
synced 2026-01-01 15:35:51 -08:00
24 lines
910 B
Markdown
24 lines
910 B
Markdown
# AWS - ECS Unauthenticated Enum
|
|
|
|
{{#include ../../../banners/hacktricks-training.md}}
|
|
|
|
## ECS
|
|
|
|
Per ulteriori informazioni controlla:
|
|
|
|
{{#ref}}
|
|
../aws-services/aws-ecs-enum.md
|
|
{{#endref}}
|
|
|
|
### Gruppo di Sicurezza o Load Balancer Pubblicamente Accessibile per i Servizi ECS
|
|
|
|
Un gruppo di sicurezza mal configurato che **consente il traffico in entrata da internet (0.0.0.0/0 o ::/0)** ai servizi Amazon ECS potrebbe esporre le risorse AWS ad attacchi.
|
|
```bash
|
|
# Example of detecting misconfigured security group for ECS services
|
|
aws ec2 describe-security-groups --query 'SecurityGroups[?IpPermissions[?contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`)]]'
|
|
|
|
# Example of detecting a publicly accessible load balancer for ECS services
|
|
aws elbv2 describe-load-balancers --query 'LoadBalancers[?Scheme == `internet-facing`]'
|
|
```
|
|
{{#include ../../../banners/hacktricks-training.md}}
|