The many ways to obtain credentials in AWS | Wiz Blog
Tags
| attack-pattern: | Data Credentials - T1589.001 Server - T1583.004 Server - T1584.004 Serverless Execution - T1648 |
Common Information
| Type | Value |
|---|---|
| UUID | 63b52f39-5f81-4e79-999d-30ef4da7ac7b |
| Fingerprint | 968851416e97914e |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Dec. 20, 2024, 8 a.m. |
| Added to db | Dec. 21, 2024, 3:54 a.m. |
| Last updated | Dec. 21, 2024, 3:54 a.m. |
| Headline | The many ways to obtain credentials in AWS |
| Title | The many ways to obtain credentials in AWS | Wiz Blog |
| Detected Hints/Tags/Attributes | 24/1/12 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://www.wiz.io/blog/the-many-ways-to-obtain-credentials-in-aws |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 398 | ✔ | Wiz Blog | RSS feed | https://www.wiz.io/blog/rss | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 3 | pods.eks.amazonaws.com |
|
| Details | Domain | 7 | eks.amazonaws.com |
|
| Details | File | 1 | boto.cfg |
|
| Details | IPv4 | 97 | 169.254.169.254 |
|
| Details | IPv4 | 9 | 169.254.170.2 |
|
| Details | IPv4 | 4 | 169.254.170.23 |
|
| Details | IPv6 | 2 | fd00:ec2::254 |
|
| Details | IPv6 | 1 | fd00:ec2::23 |
|
| Details | Url | 7 | http://169.254.169.254/latest/user-data |
|
| Details | Url | 22 | http://169.254.169.254/latest/meta-data/iam/security-credentials |
|
| Details | Url | 1 | http://169.254.170.2/v2/credentials/00000000-0000-0000-0000-000000000000 |
|
| Details | Url | 5 | http://169.254.169.254/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance |