Back to Course

AWS IAM Privilege Escalation Labs

0% Complete
0/0 Steps
  1. Introduction

    About this course
  2. Real-world case studies
  3. Useful IAM tips and security tools
  4. Introduction to AWS Enumeration
    [LAB] Getting Started with the AWS CLI
  5. [LAB] Introduction to AWS IAM Enumeration
  6. [Cheat Sheet] IAM Enumeration CLI Commands
  7. [LAB] Introduction to Secrets Manager Enumeration
  8. [Cheat Sheet] Secrets Manager Enumeration CLI Commands
  9. [LAB] Introduction to Amazon S3 Enumeration
  10. iam:CreateAccessKey
    [LAB] [CTF] iam:CreateAccessKey PrivEsc
  11. iam:CreateAccessKey Solution
  12. iam:CreateLoginProfile
    [LAB] [CTF] iam:CreateLoginProfile PrivEsc
  13. iam:CreateLoginProfile Solution
  14. iam:UpdateLoginProfile
    [LAB] [CTF] iam:UpdateLoginProfile PrivEsc
  15. iam:UpdateLoginProfile Solution
  16. iam:SetDefaultPolicyVersion
    [LAB] [CTF] iam:SetDefaultPolicyVersion PrivEsc
  17. iam:SetDefaultPolicyVersion Solution
  18. iam:AddUserToGroup
    [LAB] [CTF] iam:AddUserToGroup PrivEsc
  19. iam:AddUserToGroup Solution
  20. iam:AttachUserPolicy
    [LAB] [CTF] iam:AttachUserPolicy PrivEsc
  21. iam:AttachUserPolicy Solution
  22. iam:AttachGroupPolicy
    [LAB] [CTF] iam:AttachGroupPolicy PrivEsc
  23. iam:AttachGroupPolicy Solution
  24. iam:PutUserPolicy
    [LAB] [CTF] iam:PutUserPolicy PrivEsc
  25. iam:PutUserPolicy Solution
  26. iam:PutGroupPolicy
    [LAB] [CTF] iam:PutGroupPolicy PrivEsc
  27. iam:PutGroupPolicy Solution
  28. iam:AttachRolePolicy
    [LAB] [CTF] iam:AttachRolePolicy PrivEsc
  29. iam:AttachRolePolicy Solution
  30. iam:PutRolePolicy
    [LAB] [CTF] iam:PutRolePolicy PrivEsc
  31. iam:PutRolePolicy Solution
  32. Challenges
    About challenges
  33. Challenge #1 - Secrets Unleashed
  34. Challenge #2 - IAM Escape Room
  35. Conclusion
    What did you think of the course?
  36. What's next?
Lesson 4 of 36
In Progress

[LAB] Getting Started with the AWS CLI

Christophe February 6, 2024
Hands-On Lab

Responses

Your email address will not be published. Required fields are marked *

  1. Installed AWSCLIV2 on win10 64bit (WinInstaller)
    All steps worked without issue.
    C:\Users\YOURNAME\.aws path to profile & credentials file in windows (default)

    [profile cybrisfun]
    region = us-east-1
    output = json
    [profile AWSCLIRole]
    role_arn = arn:aws:iam::11111111111:role/AWSCLIRole <<—-using my arn number
    source_profile = cybrisfun <<—-change default to cybrisfun

  2. I’m getting an error, please help

    $ aws sts get-caller-identity

    Unable to redirect output to pager. Received the following error when opening pager:
    [Errno 2] No such file or directory: ‘less’

    Learn more about configuring the output pager by running “aws help config-vars”.

  3. [profile AWSCLIRole]
    role_arn = arn:aws:iam::1122334455:role/AWSCLIRole
    source_profile = default

    The last line I have to change it to the following, else I keep failing the rest of the lab.
    source_profile = cybrisfun

  4. @talisman8448 ➜ /workspaces/Terraformprojects (main) $ aws sts get-caller-identity –profile cloudsec
    {
    “UserId”: “AIDA53KZWQOFHH3ZVZVMJ”,
    “Account”: “952060248970”,
    “Arn”: “arn:aws:iam::952060248970:user/getting-started-with-the-aws-cli-1721747970033-Dana”

    all steps are understood and get executed successfully

  5. aws : The term ‘aws’ is not recognized as the name of a cmdlet, function, script file, or operable program. Check the
    spelling of the name, or if a path was included, verify that the path is correct and try again.
    At line:1 char:1
    + aws iam create-user –user-name cybrdiamond
    + ~~~
    + CategoryInfo : ObjectNotFound: (aws:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

    When I enter the commands I get this.

    1. Hi, this means the AWS CLI was not properly installed. Did you follow the installation instructions from AWS’ docs? If so, try restarting your terminal.