Skip to content

Latest commit

 

History

15 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

AWS Lambda Function Credential Exfiltration

OffensiveTerraform OffensiveTerraform OffensiveTerraform

Offensive Terraform module which creates Lambda function with existing IAM role. The module invokes it automatically to exfiltrate AWS temporary credential from environment variables and send it back with response.

Attack Diagram

Usage

module "lambda-function-credential-exfiltration" {
    source  = "offensive-terraform/lambda-function-credential-exfiltration/aws"

    role_arn = "arn:aws:iam::000000000000:role/lambda-role-name"
}

output "lambda_credential" {
  value = module.lambda-function-credential-exfiltration.lambda_credential
}

Author

Module managed by https://github.com/iganbold

About

Offensive Terraform module which creates Lambda function with existing IAM role. The module invokes it automatically to exfiltrate AWS temporary credential from environment variables and send it back with response.

Topics

Resources

Stars

9 stars

Watchers

1 watching

Forks

Releases

Packages

Contributors

Languages