new enumeration cloudformation and fix typo in codebuild privesc

HackTricks-wiki · Nov 17, 2024 · f4c52e4 · f4c52e4
1 parent f9dfbb1
commit f4c52e4
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codebuild-privesc.md b/pentesting-cloud/aws-security/aws-privilege-escalation/aws-codebuild-privesc.md
@@ -48,7 +48,7 @@ aws codebuild start-build --project <project-name> --buildspec-override file:///
 {% tab title="StartBuildBatch" %}
 {% code overflow="wrap" %}
 ```bash
-cat > hacktricks.yml <<EOF
+cat > /tmp/buildspec.yml <<EOF
 version: 0.2
 
 batch:

diff --git a/pentesting-cloud/aws-security/aws-services/aws-cloudformation-and-codestar-enum.md b/pentesting-cloud/aws-security/aws-services/aws-cloudformation-and-codestar-enum.md
@@ -26,6 +26,8 @@ AWS CloudFormation is a service designed to **streamline the management of AWS r
 aws cloudformation list-stacks
 aws cloudformation describe-stacks # You could find sensitive information here
 aws cloudformation list-stack-resources --stack-name <name>
+aws cloudformation get-template --stack-name cloudformationStack
+aws cloudformation describe-stack-events --stack-name cloudformationStack 
 
 ## Show params and outputs 
 aws cloudformation describe-stacks | jq ".Stacks[] | .StackId, .StackName, .Parameters, .Outputs"