AWS Attacks and Techniques

Demonstrating various attacks that can be performed on AWS accounts and services

Enumerate AWS Organization ID Enumerate AWS Account IDs Enumerate AWS IAM Users Enumerate (Unauthenticated) IAM Users and Roles Enumerate AWS Public Resources Enumerate Secrets in AWS Generate AWS Console Session Generate IAM Access Keys from CloudShell Password Spraying AWS IAM Users Server Side Request Forgery (SSRF)Subdomain Takeovers

PreviousAWS Offensive Security NextEnumerate AWS Organization ID