diff --git a/libs/opsworks.py b/libs/opsworks.py index d516f98..20b2dd2 100644 --- a/libs/opsworks.py +++ b/libs/opsworks.py @@ -20,11 +20,11 @@ credentials = session.get_credentials() AWS_ACCESS_KEY_ID = credentials.access_key -def describe_stacks(): +def opsworks_describe_stacks(): ''' Opsworks decribe stacks ''' - print('#### Listing Stacks ####') + print('#### Opsworks Listing Stacks ####') try: for region in regions: client = boto3.client( @@ -36,10 +36,11 @@ def describe_stacks(): if response.get('Stacks') is None: print("{} likely does not have Opsworks permissions\n" .format(AWS_ACCESS_KEY_ID)) elif len(response['Stacks']) <= 0: - print("[-] DescribeStacks allowed for {} but no results [-]\n" .format(region)) + print("[-] DescribeStacks allowed for {} but no results [-]" .format(region)) else: # THIS PART IS UNTESTED for r in response['Stacks']: pp.pprint(r) + print('\n') except botocore.exceptions.EndpointConnectionError as e: print("Unexpected error: {}" .format(e)) @@ -56,11 +57,11 @@ def describe_stacks(): print("CTRL-C received, exiting...") -def describe_user_profiles(): +def opsworks_describe_user_profiles(): ''' Opsworks describe user profiles ''' - print('#### Listing User Profiles ####') + print('#### Opsworks Listing User Profiles ####') try: for region in regions: client = boto3.client( diff --git a/modules/opsworks.py b/modules/opsworks.py index db1a2ca..323e703 100644 --- a/modules/opsworks.py +++ b/modules/opsworks.py @@ -6,7 +6,7 @@ def module_opsworks_describe_stacks(): Opsworks Describe stacks python3 weirdAAL.py -m opsworks_describe_stacks -t yolo ''' - describe_stacks() + opsworks_describe_stacks() def module_opsworks_describe_user_profiles(): @@ -14,4 +14,4 @@ def module_opsworks_describe_user_profiles(): Opsworks describe user profiles python3 weirdAAL.py -m opsworks_describe_user_profiles -t yolo ''' - describe_user_profiles() + opsworks_describe_user_profiles() diff --git a/modules/recon.py b/modules/recon.py index 0bc9e77..60ad7f0 100644 --- a/modules/recon.py +++ b/modules/recon.py @@ -6,12 +6,18 @@ that have functions that done have arguments if we can access them :-) from libs.brute import * from libs.s3 import * +# for recon_defaults +from libs.elasticbeanstalk import * +from libs.opsworks import * +from libs.route53 import * +from libs.sts import * + # maps to available services in boto 1.7.4 def module_recon_all(): ''' - Main recon all module - attempt to connect ot each of the services to see if we have some privs + Main recon all module - attempt to connect to each of the services to see if we have some privs python3 weirdAAL.py -m recon_all -t demo ''' get_accountid() @@ -154,3 +160,17 @@ def module_recon_all(): # S3 bucket's while we are here... get_s3objects_for_account() + + +def module_recon_defaults(): + ''' + Recon defaults that every account seems to have minus route53_geolocations (static data) + python3 weirdAAL.py -m recon_defaults -t demo + ''' + elasticbeanstalk_describe_applications() + elasticbeanstalk_describe_application_versions() + elasticbeanstalk_describe_environments() + elasticbeanstalk_describe_events() + opsworks_describe_stacks() + # list_geolocations() # not work looking at, it's static data + sts_get_accountid_all()