CredMaster
CredMaster copied to clipboard
Added "aws" module for console signins
Basically just lifted code from https://github.com/WhiteOakSecurity/GoAWSConsoleSpray and embedded it in credmaster to take advantage of IP rotating, etc. Also does username enumeration to a degree for users with MFA codes so had to add a few bits of logic and a status code to main credmaster.py to handle that (see commit comments). Had some TODOs in commit comments not sure if they are possible in credmaster.
To run execute
python3 credmaster.py --plugin aws --account [account_number] --aws_region_spray [region_for_console_sign_in] --access_key [fireprox access key] --secret_access_key [fireprox secret access key] -u [usernamefile] -p [passwordfile]