diff --git a/libs/brute.py b/libs/brute.py index 1eebec5..f78b11a 100644 --- a/libs/brute.py +++ b/libs/brute.py @@ -294,6 +294,10 @@ def brute_autoscaling_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY): # http://boto3.readthedocs.io/en/latest/reference/services/autoscaling-plans.html # todo +def brute_autoscaling_plans_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY): + print("### Enumerating Autoscaling-Plans Permissions ###") + tests = [('DescribeScalingPlans', 'describe_scaling_plans', (), {}, ), ] + return generic_permission_bruteforcer(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, 'autoscaling-plans', tests) # http://boto3.readthedocs.io/en/latest/reference/services/batch.html diff --git a/modules/recon.py b/modules/recon.py index b86793f..c4d7b28 100644 --- a/modules/recon.py +++ b/modules/recon.py @@ -15,7 +15,7 @@ def step_recon_all(): # AppSync no usable functions brute_athena_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) brute_autoscaling_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) - # AutoScalingPlans + brute_autoscaling_plans_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) brute_batch_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) brute_budgets_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) # CostExplorer