01 02 03 04 05 06 07
Phase 4 of 5 · AWS Credential Hunt

Phase 4 · Privilege Escalation

m.smith@WS47:~$ · meterpreter shell
$ _
🔒 us-east-1.console.aws.amazon.com/iamv2/home#/users/details/jenkins-deployer
N. Virginia ▾
IAM Identity and Access Management (IAM) › Users › —
Summary LOCKED
User name
— no identity —
ARN
awaiting credentials…
Permissions Groups Tags Security credentials Access Advisor
Permissions policies (0)
Policy name Type
No permissions yet · run a step to load this user's policies.
Hunt the disk for ~/.aws/credentials — devs leave plaintext keys behind ALL the time.