Enumerate AWS Organization ID

How to enumerate the AWS Organization ID

Methods to Enumerate AWS Organization ID

Using an S3 Bucket Name

  • Knowing the name of an AWS S3 bucket, we can use conditional-love to identify the organization ID

  • The bucket must be public or otherwise accessible by the IAM Role used

./conditional-love.py --profile dev --role arn:aws:iam::111111111111:role/s3-cracker --target tylerguessmyorg --action=s3:HeadObject --condition=aws:ResourceOrgID --alphabet=abcdefghijklmnopqrstuvwxyz-

Starting to be wrong. Please be patient...
=> o
=> o-
=> o-a
=> o-ab
=> o-abe
=> o-abek
=> o-abekz

Last updated

Was this helpful?