Cloud Ring - Exploitation via AWS CLI Walkthrough
Flex some more advanced AWS CLI skills to escalate privileges after completing Trufflehog Search Challenge! Help Gerty Snowburrow in the Cloud Ring to get hints for this challenge. After referencing the AWS command reference we were able to identify the following command that lists the iam attached user policies for user haug >> aws iam list-attached-user-policies --user-name haug Next Question in Terminal >> aws iam get-policy --policy-arn arn:aws:iam::602123424321:policy/TIER1_READONLY_POLICY This command allows us to view the TIE1_READONLY_POLICY in detail which was attached to the user identity we stole from the commit Next question in terminal Now we will have to view the default version of the TIER1_READONLY_POLICY by suing the –version-id switch and to support terminal navigation have pipped the command through more >> aws iam get-policy-version --policy-arn arn:aws:iam::602123424321:policy/TIER1_READONLY_POLICY --version-id v1 | more Ne...