Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ebs__enum_snapshots_unauth Module for Unauthenticated EBS Snapshot Reconnaissance #370

Merged

Conversation

Y4nush
Copy link
Contributor

@Y4nush Y4nush commented Sep 25, 2023

This pull request introduces a new module, ebs__enum_snapshots_unauth, designed for unauthenticated reconnaissance of public EBS snapshots. The module offers users the capability to search for snapshots based on account-id, keyword, list of account-ids, or a list of keywords. The purpose of this feature is to uncover snapshots related to a specific organization, thereby aiding in further reconnaissance.

Two main approaches are supported by this module:

  1. Account ID Enumeration: This approach is useful when an organization's account ID is disclosed. It allows for the enumeration of snapshots related to the organization.
  2. Keyword Enumeration: This method is employed to find snapshots related to an organization through the search of related keywords, aiming to disclose the organization's account ID.

This module was inspired by the article Assume the Worst: AWS Assume Role Enumeration, and it aims to complement the existing ebs__enum_volumes_snapshots module, which appears to be more intended for authenticated enumeration.

Thank you for considering this addition. Looking forward to any feedback or suggestions for improvement.

@DaveYesland
Copy link
Collaborator

Hi, thanks for the pull request.
This module looks like a great idea. Sorry for the delay but we will review this as soon as possible! appreciate the contribution!

Copy link
Collaborator

@DaveYesland DaveYesland left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a couple formatting changes and I can get this merged. Let me know if you have an questions.

pacu/modules/ebs__enum_snapshots_unauth/main.py Outdated Show resolved Hide resolved
pacu/modules/ebs__enum_snapshots_unauth/main.py Outdated Show resolved Hide resolved
@Y4nush
Copy link
Contributor Author

Y4nush commented Oct 26, 2023

Hi Dave, thanks for your review. I have fixed the issues.

@DaveYesland DaveYesland merged commit d45a5ac into RhinoSecurityLabs:master Oct 26, 2023
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants