This commit is contained in:
carnal0wnage
2018-05-09 20:37:50 -04:00
parent 5cc626d6b2
commit e5ecdae1e4
3 changed files with 29 additions and 8 deletions

View File

@@ -20,11 +20,11 @@ credentials = session.get_credentials()
AWS_ACCESS_KEY_ID = credentials.access_key AWS_ACCESS_KEY_ID = credentials.access_key
def describe_stacks(): def opsworks_describe_stacks():
''' '''
Opsworks decribe stacks Opsworks decribe stacks
''' '''
print('#### Listing Stacks ####') print('#### Opsworks Listing Stacks ####')
try: try:
for region in regions: for region in regions:
client = boto3.client( client = boto3.client(
@@ -36,10 +36,11 @@ def describe_stacks():
if response.get('Stacks') is None: if response.get('Stacks') is None:
print("{} likely does not have Opsworks permissions\n" .format(AWS_ACCESS_KEY_ID)) print("{} likely does not have Opsworks permissions\n" .format(AWS_ACCESS_KEY_ID))
elif len(response['Stacks']) <= 0: elif len(response['Stacks']) <= 0:
print("[-] DescribeStacks allowed for {} but no results [-]\n" .format(region)) print("[-] DescribeStacks allowed for {} but no results [-]" .format(region))
else: # THIS PART IS UNTESTED else: # THIS PART IS UNTESTED
for r in response['Stacks']: for r in response['Stacks']:
pp.pprint(r) pp.pprint(r)
print('\n')
except botocore.exceptions.EndpointConnectionError as e: except botocore.exceptions.EndpointConnectionError as e:
print("Unexpected error: {}" .format(e)) print("Unexpected error: {}" .format(e))
@@ -56,11 +57,11 @@ def describe_stacks():
print("CTRL-C received, exiting...") print("CTRL-C received, exiting...")
def describe_user_profiles(): def opsworks_describe_user_profiles():
''' '''
Opsworks describe user profiles Opsworks describe user profiles
''' '''
print('#### Listing User Profiles ####') print('#### Opsworks Listing User Profiles ####')
try: try:
for region in regions: for region in regions:
client = boto3.client( client = boto3.client(

View File

@@ -6,7 +6,7 @@ def module_opsworks_describe_stacks():
Opsworks Describe stacks Opsworks Describe stacks
python3 weirdAAL.py -m opsworks_describe_stacks -t yolo python3 weirdAAL.py -m opsworks_describe_stacks -t yolo
''' '''
describe_stacks() opsworks_describe_stacks()
def module_opsworks_describe_user_profiles(): def module_opsworks_describe_user_profiles():
@@ -14,4 +14,4 @@ def module_opsworks_describe_user_profiles():
Opsworks describe user profiles Opsworks describe user profiles
python3 weirdAAL.py -m opsworks_describe_user_profiles -t yolo python3 weirdAAL.py -m opsworks_describe_user_profiles -t yolo
''' '''
describe_user_profiles() opsworks_describe_user_profiles()

View File

@@ -6,12 +6,18 @@ that have functions that done have arguments if we can access them :-)
from libs.brute import * from libs.brute import *
from libs.s3 import * from libs.s3 import *
# for recon_defaults
from libs.elasticbeanstalk import *
from libs.opsworks import *
from libs.route53 import *
from libs.sts import *
# maps to available services in boto 1.7.4 # maps to available services in boto 1.7.4
def module_recon_all(): def module_recon_all():
''' '''
Main recon all module - attempt to connect ot each of the services to see if we have some privs Main recon all module - attempt to connect to each of the services to see if we have some privs
python3 weirdAAL.py -m recon_all -t demo python3 weirdAAL.py -m recon_all -t demo
''' '''
get_accountid() get_accountid()
@@ -154,3 +160,17 @@ def module_recon_all():
# S3 bucket's while we are here... # S3 bucket's while we are here...
get_s3objects_for_account() get_s3objects_for_account()
def module_recon_defaults():
'''
Recon defaults that every account seems to have minus route53_geolocations (static data)
python3 weirdAAL.py -m recon_defaults -t demo
'''
elasticbeanstalk_describe_applications()
elasticbeanstalk_describe_application_versions()
elasticbeanstalk_describe_environments()
elasticbeanstalk_describe_events()
opsworks_describe_stacks()
# list_geolocations() # not work looking at, it's static data
sts_get_accountid_all()