dash/weirdAAL
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

brute.py updates, slowly getting there

Browse Source
This commit is contained in:
carnal0wnage
2017-06-21 13:15:10 -04:00
parent 35bced603b
commit 0301047078
1 changed files with 22 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
brute/brute.py
View File

@@ -715,34 +715,47 @@ def brute_cloudwatchlogs_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY):
#http://docs.aws.amazon.com/general/latest/gr/rande.html#machinelearning_region <--allowed regions for ML #http://docs.aws.amazon.com/general/latest/gr/rande.html#machinelearning_region <--allowed regions for ML
def brute_machinelearning_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY): def brute_machinelearning_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY):
print ("### Enumerating Machine Learning Permissions ###") print ("### Enumerating Machine Learning Permissions ###")
tests = [('DescribeDataSources', 'describe_data_sources', (), {}), tests = [('DescribeDataSources', 'describe_data_sources', (), {} ),
('DescribeEvaluations', 'describe_evaluations', (), {}), ('DescribeEvaluations', 'describe_evaluations', (), {} ),
] ]
return generic_permission_bruteforcer(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, 'machinelearning', tests) return generic_permission_bruteforcer(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, 'machinelearning', tests)
#http://boto3.readthedocs.io/en/latest/reference/services/marketplace-entitlement.html #http://boto3.readthedocs.io/en/latest/reference/services/marketplace-entitlement.html
#TODO #NO functions to call without arguements
#http://boto3.readthedocs.io/en/latest/reference/services/marketplacecommerceanalytics.html #http://boto3.readthedocs.io/en/latest/reference/services/marketplacecommerceanalytics.html
#TODO #NO functions to call without arguements
#http://boto3.readthedocs.io/en/latest/reference/services/meteringmarketplace.html #http://boto3.readthedocs.io/en/latest/reference/services/meteringmarketplace.html
#TODO #NO functions to call without arguements
#http://boto3.readthedocs.io/en/latest/reference/services/mturk.html #http://boto3.readthedocs.io/en/latest/reference/services/mturk.html
def brute_mturk_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY): def brute_mturk_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY):
print ("### Enumerating Mechanical Turk (MTurk) Permissions ###") print ("### Enumerating Mechanical Turk (MTurk) Permissions ###")
tests = [('GetAccountBalance', 'get_account_balance', (), {}), tests = [('GetAccountBalance', 'get_account_balance', (), {} ),
('ListHits', 'list_hits', (), {}), ('ListHits', 'list_hits', (), {} ),
('ListWorkerBlocks', 'list_worker_blocks', (), {}), ('ListWorkerBlocks', 'list_worker_blocks', (), {} ),
] ]
return generic_permission_bruteforcer(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, 'mturk', tests) return generic_permission_bruteforcer(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, 'mturk', tests)
#http://boto3.readthedocs.io/en/latest/reference/services/opsworks.html #http://boto3.readthedocs.io/en/latest/reference/services/opsworks.html
#TODO #Everything else requires a stackID to get the instance/app/volume info per stack
def brute_opsworks_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY):
print ("### Enumerating OpsWorks Permissions ###")
tests = [('DescribeUserProfiles', 'describe_user_profiles', (), {} ),
('DescribeStacks', 'describe_stacks', (), {} ),
]
return generic_permission_bruteforcer(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, 'opsworks', tests)
#http://boto3.readthedocs.io/en/latest/reference/services/opsworkscm.html #http://boto3.readthedocs.io/en/latest/reference/services/opsworkscm.html
#TODO #TODO
def brute_opsworkscm_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY):
print ("### Enumerating OpsWorks for Chef Automate Permissions ###")
tests = [('DescribeAccountAttributes', 'describe_account_attributes', (), {} ),
('DescribeBackups', 'describe_backups', (), {} ),
('DescribeServers', 'describe_servers', (), {} ),
]
return generic_permission_bruteforcer(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, 'opsworkscm', tests)
#http://boto3.readthedocs.io/en/latest/reference/services/organizations.html #http://boto3.readthedocs.io/en/latest/reference/services/organizations.html
#TODO #TODO