CredMaster icon indicating copy to clipboard operation
CredMaster copied to clipboard

Added "aws" module for console signins

Open WebbinRoot opened this issue 8 months ago • 0 comments

Basically just lifted code from https://github.com/WhiteOakSecurity/GoAWSConsoleSpray and embedded it in credmaster to take advantage of IP rotating, etc. Also does username enumeration to a degree for users with MFA codes so had to add a few bits of logic and a status code to main credmaster.py to handle that (see commit comments). Had some TODOs in commit comments not sure if they are possible in credmaster.

To run execute

python3 credmaster.py --plugin aws --account [account_number] --aws_region_spray [region_for_console_sign_in] --access_key [fireprox access key] --secret_access_key [fireprox secret access key] -u [usernamefile] -p [passwordfile]

WebbinRoot avatar Apr 12 '25 21:04 WebbinRoot