Back to Course
AWS IAM Privilege Escalation Labs
0% Complete
0/0 Steps
-
Introduction
About this course -
Real-world case studies
-
Useful IAM tips and security tools
-
Introduction to AWS Enumeration[LAB] Getting Started with the AWS CLI
-
[LAB] Introduction to AWS IAM Enumeration
-
[Cheat Sheet] IAM Enumeration CLI Commands
-
[LAB] Introduction to Secrets Manager Enumeration
-
[Cheat Sheet] Secrets Manager Enumeration CLI Commands
-
[LAB] Introduction to Amazon S3 Enumeration
-
iam:CreateAccessKey[LAB] [CTF] iam:CreateAccessKey PrivEsc
-
iam:CreateAccessKey Solution
-
iam:CreateLoginProfile[LAB] [CTF] iam:CreateLoginProfile PrivEsc
-
iam:CreateLoginProfile Solution
-
iam:UpdateLoginProfile[LAB] [CTF] iam:UpdateLoginProfile PrivEsc
-
iam:UpdateLoginProfile Solution
-
iam:SetDefaultPolicyVersion[LAB] [CTF] iam:SetDefaultPolicyVersion PrivEsc
-
iam:SetDefaultPolicyVersion Solution
-
iam:AddUserToGroup[LAB] [CTF] iam:AddUserToGroup PrivEsc
-
iam:AddUserToGroup Solution
-
iam:AttachUserPolicy[LAB] [CTF] iam:AttachUserPolicy PrivEsc
-
iam:AttachUserPolicy Solution
-
iam:AttachGroupPolicy[LAB] [CTF] iam:AttachGroupPolicy PrivEsc
-
iam:AttachGroupPolicy Solution
-
iam:PutUserPolicy[LAB] [CTF] iam:PutUserPolicy PrivEsc
-
iam:PutUserPolicy Solution
-
iam:PutGroupPolicy[LAB] [CTF] iam:PutGroupPolicy PrivEsc
-
iam:PutGroupPolicy Solution
-
iam:AttachRolePolicy[LAB] [CTF] iam:AttachRolePolicy PrivEsc
-
iam:AttachRolePolicy Solution
-
iam:PutRolePolicy[LAB] [CTF] iam:PutRolePolicy PrivEsc
-
iam:PutRolePolicy Solution
-
ChallengesAbout challenges
-
Challenge #1 - Secrets Unleashed
-
Challenge #2 - IAM Escape Room
-
ConclusionWhat did you think of the course?
-
What's next?
Installed AWSCLIV2 on win10 64bit (WinInstaller)
All steps worked without issue.
C:\Users\YOURNAME\.aws path to profile & credentials file in windows (default)
[profile cybrisfun]
region = us-east-1
output = json
[profile AWSCLIRole]
role_arn = arn:aws:iam::11111111111:role/AWSCLIRole <<—-using my arn number
source_profile = cybrisfun <<—-change default to cybrisfun
Is this a personal note or did you have an issue / question I can help with?
I’m getting an error, please help
$ aws sts get-caller-identity
Unable to redirect output to pager. Received the following error when opening pager:
[Errno 2] No such file or directory: ‘less’
Learn more about configuring the output pager by running “aws help config-vars”.
It sounds like you are missing the package called ‘less’. More info here including how to install it: https://stackoverflow.com/questions/57953187/aws-cli-has-no-output
[profile AWSCLIRole]
role_arn = arn:aws:iam::1122334455:role/AWSCLIRole
source_profile = default
The last line I have to change it to the following, else I keep failing the rest of the lab.
source_profile = cybrisfun
@talisman8448 ➜ /workspaces/Terraformprojects (main) $ aws sts get-caller-identity –profile cloudsec
{
“UserId”: “AIDA53KZWQOFHH3ZVZVMJ”,
“Account”: “952060248970”,
“Arn”: “arn:aws:iam::952060248970:user/getting-started-with-the-aws-cli-1721747970033-Dana”
all steps are understood and get executed successfully
Glad to hear it! Nice work
Thumbs up for the level of detail provided!
Appreciate the feedback and glad you liked it! What’s next?
I never thought about it, i remember the famous quote “God in the Detail”. greate to know we can use AWSCLIRole with profile
aws : The term ‘aws’ is not recognized as the name of a cmdlet, function, script file, or operable program. Check the
spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ aws iam create-user –user-name cybrdiamond
+ ~~~
+ CategoryInfo : ObjectNotFound: (aws:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
When I enter the commands I get this.
Hi, this means the AWS CLI was not properly installed. Did you follow the installation instructions from AWS’ docs? If so, try restarting your terminal.