Hands-On AWS Penetration Testing with Kali Linux

From enumeration to privilege escalation

Our permissions have been enumerated, so now we will move into trying to use those permissions for privilege escalation in the environment. There is also a Pacu module for this called iam_privesc_scan. This module will run and check the set of permissions that you enumerated to see if your user is vulnerable to any methods out of 21 different known privilege escalation methods in AWS.

Rhino Security Labs wrote an article that details these 21 different privilege escalation methods and how they can be manually exploited, which you can refer to here: https://rhinosecuritylabs.com/aws/aws-privilege-escalation-methods-mitigation/.

After the module checks to see if we are vulnerable to any of those methods, ...