Re:Show HN: Endgame – An AWS Pentesting tool to backdoor or ...
by urda on Tuesday February 16, 2021 @04:31PM
(#26159047)
> First, authenticate to AWS CLI using credentials to the victim's account.
... right. This is just a glorified "what can this IAM user do" tool. There is literally no actual pentesting done. Not much different than having the key to your neighbor's front door and seeing how many things inside their house are unlocked for you.
... right. This is just a glorified "what can this IAM user do" tool. There is literally no actual pentesting done. Not much different than having the key to your neighbor's front door and seeing how many things inside their house are unlocked for you.