AKIBA.AWS #10 Developers.IOæ±äº¬ å‰å¤œç¥ï¼AWS Update LT大会ã®è³‡æ–™ã§ã™ã€‚ AWS使ã£ã¦ã‚Œã°ã‚»ã‚ュリティã¯å®‰å¿ƒï¼Ÿ ãã¡ã‚“ã¨ç†è§£ã—ã¦AWSã§ã‚‚ã‚»ã‚ュリティ対ç–ã—ã¾ã—ょã†ã€‚ #akibaaws
AWS固有ã®ã‚»ã‚ュリティリスクã¨å¯¾ç– - Speaker Deck
AKIBA.AWS #10 Developers.IOæ±äº¬ å‰å¤œç¥ï¼AWS Update LT大会ã®è³‡æ–™ã§ã™ã€‚ AWS使ã£ã¦ã‚Œã°ã‚»ã‚ュリティã¯å®‰å¿ƒï¼Ÿ ãã¡ã‚“ã¨ç†è§£ã—ã¦AWSã§ã‚‚ã‚»ã‚ュリティ対ç–ã—ã¾ã—ょã†ã€‚ #akibaaws
Assume the Worst: Enumerating AWS Roles through ‘AssumeRole’ - Rhino Security Labs
Disclaimer: As always, use Pacu and similar AWS pentesting tools responsibly. Only test against your own AWS accounts, or those you are authorized for. Amazon Web Services (AWS) IAM roles are sets of permissions that serve as a common way to delegate access to users or services. Roles can be bestowed to internal and external IAM users, AWS services, applications, and even external user accounts ou
EC2上ã®AWS CLIã§ä½¿ã‚ã‚Œã¦ã„ã‚‹169.254ã«ã¤ã„㦠- 妄想ã¾ã¨ã‚
ãŠä¹…ã—ã¶ã‚Šã§ã™ã€‚ã²ã‚ãŸã‚“ã§ã™ã€‚ å‰ã€…ã‹ã‚‰æ°—ã«ãªã£ã¦ã„ãŸAWS EC2ã®169.254.169.254ã«ã¤ã„ã¦å°‘ã—éŠã‚“ã§ã¿ãŸã®ã§ã¾ã¨ã‚ã¾ã™ã€‚ EC2ã§ã¯ã€ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹å†…ã‹ã‚‰ http://169.254.169.254/ ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ã€ãã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã«é–¢ã™ã‚‹æƒ…å ±ãŒå–å¾—ã§ãるよã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ docs.aws.amazon.com ã‚ã¾ã‚Šæ„è˜ã—ãŸã“ã¨ã¯ãªã„ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã«IAMãƒãƒ¼ãƒ«ã‚’çµã³ä»˜ã‘ãŸçŠ¶æ…‹ã§AWS CLIを使ã†ã¨å†…部的ã«ã“ã®169ã®URLãŒå©ã‹ã‚Œã‚‹ä»•çµ„ã¿ã«ãªã£ã¦ã„ã¾ã™ã€‚ ã“ã‚Œã¯ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹å†…ã§--debugオプションを使ã£ã¦AWS CLIを実行ã™ã‚‹ã¨ã‚ã‹ã‚‹ã¨æ€ã„ã¾ã™ã€‚ [ec2-user@ip-172-31-30-197 ~]$ aws s3 ls --debug ～～～ 2018-09-03 11:11:33,898 - MainThread - boto
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
処ç†ã‚’実行ä¸ã§ã™
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
{{#tags}}- {{label}}
{{/tags}}