AWS IAM Privilege Escalation Methods Logo

AWS IAM Privilege Escalation Methods

0
Free
Visit Website

An attacker with the iam:CreatePolicyVersion permission can create a new version of an IAM policy that they have access to. This allows them to define their own custom permissions. When creating a new policy version, it needs to be set as the default version to take effect, which you would think would require the iam:SetDefaultPolicyVersion permission, but when creating a new policy version, it is possible to include a flag (--set-as-default) that will automatically create it as the new default version. That flag does not require the iam:SetDefaultPolicyVersion permission to use. This privilege escalation method could allow a user to gain full administrator access of the AWS account.

FEATURES

ALTERNATIVES

CloudTracker helps identify over-privileged IAM users and roles by analyzing CloudTrail logs.

Free

Tool for associating IAM roles to Pods in Kubernetes clusters.

Free

Repokid uses Access Advisor to remove unused service permissions from IAM roles in AWS.

Free

A list of disposable email domains to detect or block disposable accounts

Free

BeyondTrust Privileged Access Management (PAM) provides comprehensive security controls for privileged accounts and users.

Free

Abusing DNSAdmins privilege for escalation in Active Directory

Free

Okta Customer Identity Cloud is a CIAM solution that provides secure, customizable identity management for consumer and SaaS applications.

Commercial

Encrypt Kubernetes Secrets into SealedSecrets for safe storage and controlled decryption within the cluster.

Free
CyberSecTools logoCyberSecTools

Explore the largest curated directory of cybersecurity tools and resources to enhance your security practices. Find the right solution for your domain.

Copyright © 2024 - All rights reserved