Hands-On AWS Penetration Testing with Kali Linux

Getting past authentication in RDS

With the correct RDS permissions, we can potentially gain full access to any RDS database instance in our target account as the administrator user, which would grant us full access to the data stored within.

This attack process can be done manually, or with the rds__explore_snapshots Pacu module. The goal is to abuse RDS database instance backups to create a new copy of the existing databases with our own private access. If we gained access to RDS and there was a single instance and no backups, the process would entail the following steps:

1. Create a snapshot of the running database instance.
2. Restore that snapshot to a new database instance.
3. Change the master password of our new database instance to something ...