Skip to content

Latest commit

 

History

History
88 lines (59 loc) · 4.92 KB

aws-codebuild-enum.md

File metadata and controls

88 lines (59 loc) · 4.92 KB

AWS - Codebuild Enum

AWS - Codebuild Enum

Learn AWS hacking from zero to hero with htARTE (HackTricks AWS Red Team Expert)!

Other ways to support HackTricks:

CodeBuild

AWS CodeBuild is recognized as a fully managed continuous integration service. The primary purpose of this service is to automate the sequence of compiling source code, executing tests, and packaging the software for deployment purposes. The predominant benefit offered by CodeBuild lies in its ability to alleviate the need for users to provision, manage, and scale their build servers. This convenience is because the service itself manages these tasks. Essential features of AWS CodeBuild encompass:

  1. Managed Service: CodeBuild manages and scales the build servers, freeing users from server maintenance.
  2. Continuous Integration: It integrates with the development and deployment workflow, automating the build and test phases of the software release process.
  3. Package Production: After the build and test phases, it prepares the software packages, making them ready for deployment.

AWS CodeBuild seamlessly integrates with other AWS services, enhancing the CI/CD (Continuous Integration/Continuous Deployment) pipeline's efficiency and reliability.

Enumeration

# List external repo creds (such as github tokens)
## It doesn't return the token but just the ARN where it's located
aws codebuild list-source-credentials

# Projects
aws codebuild list-shared-projects
aws codebuild list-projects
aws codebuild batch-get-projects --names <project_name> # Check for creds in env vars

# Builds
aws codebuild list-builds
aws codebuild list-builds-for-project --project-name <p_name>
aws codebuild list-build-batches
aws codebuild list-build-batches-for-project --project-name <p_name>

# Reports
aws codebuild list-reports
aws codebuild describe-test-cases --report-arn <ARN>

Privesc

In the following page, you can check how to abuse codebuild permissions to escalate privileges:

{% content-ref url="../aws-privilege-escalation/aws-codebuild-privesc.md" %} aws-codebuild-privesc.md {% endcontent-ref %}

Post Exploitation

{% content-ref url="../../aws-pentesting/aws-post-exploitation/aws-codebuild-post-exploitation.md" %} aws-codebuild-post-exploitation.md {% endcontent-ref %}

Unauthenticated Access

{% content-ref url="../aws-unauthenticated-enum-access/aws-codebuild-unauthenticated-access.md" %} aws-codebuild-unauthenticated-access.md {% endcontent-ref %}

References

Learn AWS hacking from zero to hero with htARTE (HackTricks AWS Red Team Expert)!

Other ways to support HackTricks: