To begin the authenticated recon portion of our assessment, we will need to use the swap_keys Pacu command to switch from our PersonalUser to the CompromisedUser:
- Run swap_keys in Pacu to switch to the CompromisedUser.
- The first thing to do for authenticated recon is to find out our own privileges so that we know what kind of access we have to the AWS account. This can be done by using the iam__enum_permissions Pacu module. It doesn't need any arguments for our current purpose, so we can run the following command:
- Next, we can check out what permissions were enumerated with the whoami command: