Tech
One IAM Action Away From Admin: Self-Attach Privilege Escalation
β Human-authored analysis; AI used for formatting and proofreading.
In 2018, Spencer Gietzen at Rhino Security Labs published a catalogue of 24 ways to escalate from low-privilege IAM identities to full administrative access. Technique #1 was the simplest one in the entire catalogue:
aws iam attach-user-policy \
--user-name $YOUR_OWN_USERNAME \
--policy-arn arn:aws:iam::aws:policy/AdministratorAccess
Three command-line arguments. No second permission, exploit...
Read the full discussion on Dev.to
This article was aggregated from Dev.to. Click to join the conversation.
View on Dev.to