nuclei-templates icon indicating copy to clipboard operation
nuclei-templates copied to clipboard

Added templates to identify /.aws/credenitals and /.aws/config

Open m4lwhere opened this issue 1 year ago • 0 comments

Template / PR Information

  • Identify exposed /.aws/credentials and /.aws/config files for a host. These exposed files can leak access keys for AWS.
  • References: https://aws.amazon.com/blogs/security/what-to-do-if-you-inadvertently-expose-an-aws-access-key/

Template Validation

I've validated this template locally?

  • [x] YES
  • [ ] NO

I've validated these templates across my Internet research as well.

Additional Details (leave it blank if not applicable)

Many organizations inadvertently leak their AWS configurations to the Internet. This causes a significant impact through leaked key material and allows attackers to use those keys to authenticate to AWS as that account.

These templates search for the /.aws/credentials and /.aws/config files which are used by the AWS CLI to programmatically interface with AWS.

This PR contains two templates since they are similar.

Additional References:

m4lwhere avatar May 21 '23 14:05 m4lwhere