Skip to content

Latest commit

 

History

History
53 lines (34 loc) · 3.07 KB

File metadata and controls

53 lines (34 loc) · 3.07 KB

AWS - ECS Unauthenticated Enum

Learn AWS hacking from zero to hero with htARTE (HackTricks AWS Red Team Expert)!

Other ways to support HackTricks:

ECS

For more information check:

{% content-ref url="../aws-services/aws-ecs-enum.md" %} aws-ecs-enum.md {% endcontent-ref %}

Publicly Accessible Security Group or Load Balancer for ECS Services

A misconfigured security group that allows inbound traffic from the internet (0.0.0.0/0 or ::/0) to the Amazon ECS services could expose the AWS resources to attacks.

{% code overflow="wrap" %}

# Example of detecting misconfigured security group for ECS services
aws ec2 describe-security-groups --query 'SecurityGroups[?IpPermissions[?contains(IpRanges[].CidrIp, `0.0.0.0/0`) || contains(Ipv6Ranges[].CidrIpv6, `::/0`)]]'

# Example of detecting a publicly accessible load balancer for ECS services
aws elbv2 describe-load-balancers --query 'LoadBalancers[?Scheme == `internet-facing`]'

{% endcode %}

Learn AWS hacking from zero to hero with htARTE (HackTricks AWS Red Team Expert)!

Other ways to support HackTricks: