From 7f9dc8810bab658c0433c84eb1c092b32a472808 Mon Sep 17 00:00:00 2001 From: carnal0wnage Date: Fri, 13 Apr 2018 03:30:50 -0400 Subject: [PATCH] updated brute/recon --- libs/brute.py | 4 ++++ modules/recon.py | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/libs/brute.py b/libs/brute.py index 1eebec5..f78b11a 100644 --- a/libs/brute.py +++ b/libs/brute.py @@ -294,6 +294,10 @@ def brute_autoscaling_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY): # http://boto3.readthedocs.io/en/latest/reference/services/autoscaling-plans.html # todo +def brute_autoscaling_plans_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY): + print("### Enumerating Autoscaling-Plans Permissions ###") + tests = [('DescribeScalingPlans', 'describe_scaling_plans', (), {}, ), ] + return generic_permission_bruteforcer(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, 'autoscaling-plans', tests) # http://boto3.readthedocs.io/en/latest/reference/services/batch.html diff --git a/modules/recon.py b/modules/recon.py index b86793f..c4d7b28 100644 --- a/modules/recon.py +++ b/modules/recon.py @@ -15,7 +15,7 @@ def step_recon_all(): # AppSync no usable functions brute_athena_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) brute_autoscaling_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) - # AutoScalingPlans + brute_autoscaling_plans_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) brute_batch_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) brute_budgets_permissions(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY) # CostExplorer