This commit is contained in:
carnal0wnage
2018-05-09 20:37:50 -04:00
parent 5cc626d6b2
commit e5ecdae1e4
3 changed files with 29 additions and 8 deletions

View File

@@ -20,11 +20,11 @@ credentials = session.get_credentials()
AWS_ACCESS_KEY_ID = credentials.access_key
def describe_stacks():
def opsworks_describe_stacks():
'''
Opsworks decribe stacks
'''
print('#### Listing Stacks ####')
print('#### Opsworks Listing Stacks ####')
try:
for region in regions:
client = boto3.client(
@@ -36,10 +36,11 @@ def describe_stacks():
if response.get('Stacks') is None:
print("{} likely does not have Opsworks permissions\n" .format(AWS_ACCESS_KEY_ID))
elif len(response['Stacks']) <= 0:
print("[-] DescribeStacks allowed for {} but no results [-]\n" .format(region))
print("[-] DescribeStacks allowed for {} but no results [-]" .format(region))
else: # THIS PART IS UNTESTED
for r in response['Stacks']:
pp.pprint(r)
print('\n')
except botocore.exceptions.EndpointConnectionError as e:
print("Unexpected error: {}" .format(e))
@@ -56,11 +57,11 @@ def describe_stacks():
print("CTRL-C received, exiting...")
def describe_user_profiles():
def opsworks_describe_user_profiles():
'''
Opsworks describe user profiles
'''
print('#### Listing User Profiles ####')
print('#### Opsworks Listing User Profiles ####')
try:
for region in regions:
client = boto3.client(

View File

@@ -6,7 +6,7 @@ def module_opsworks_describe_stacks():
Opsworks Describe stacks
python3 weirdAAL.py -m opsworks_describe_stacks -t yolo
'''
describe_stacks()
opsworks_describe_stacks()
def module_opsworks_describe_user_profiles():
@@ -14,4 +14,4 @@ def module_opsworks_describe_user_profiles():
Opsworks describe user profiles
python3 weirdAAL.py -m opsworks_describe_user_profiles -t yolo
'''
describe_user_profiles()
opsworks_describe_user_profiles()

View File

@@ -6,12 +6,18 @@ that have functions that done have arguments if we can access them :-)
from libs.brute import *
from libs.s3 import *
# for recon_defaults
from libs.elasticbeanstalk import *
from libs.opsworks import *
from libs.route53 import *
from libs.sts import *
# maps to available services in boto 1.7.4
def module_recon_all():
'''
Main recon all module - attempt to connect ot each of the services to see if we have some privs
Main recon all module - attempt to connect to each of the services to see if we have some privs
python3 weirdAAL.py -m recon_all -t demo
'''
get_accountid()
@@ -154,3 +160,17 @@ def module_recon_all():
# S3 bucket's while we are here...
get_s3objects_for_account()
def module_recon_defaults():
'''
Recon defaults that every account seems to have minus route53_geolocations (static data)
python3 weirdAAL.py -m recon_defaults -t demo
'''
elasticbeanstalk_describe_applications()
elasticbeanstalk_describe_application_versions()
elasticbeanstalk_describe_environments()
elasticbeanstalk_describe_events()
opsworks_describe_stacks()
# list_geolocations() # not work looking at, it's static data
sts_get_accountid_all()