Playing with CloudGoat part 4: security nuances of AWS Glue, CodeBuild and S3 services
Tags
| attack-pattern: | Data Credentials - T1589.001 Python - T1059.006 Software - T1592.002 Ssh - T1021.004 Tool - T1588.002 |
Common Information
| Type | Value |
|---|---|
| UUID | ab29d8ce-0a26-47c6-8975-52e66114f960 |
| Fingerprint | 2a18d50207a68891 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Jan. 11, 2019, 1:40 p.m. |
| Added to db | Feb. 18, 2023, 2:08 a.m. |
| Last updated | Nov. 16, 2024, 7:04 p.m. |
| Headline | Playing with CloudGoat part 4: security nuances of AWS Glue, CodeBuild and S3 services |
| Title | Playing with CloudGoat part 4: security nuances of AWS Glue, CodeBuild and S3 services |
| Detected Hints/Tags/Attributes | 33/1/9 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 180 | readme.md |
|
| Details | Domain | 33 | start.sh |
|
| Details | Domain | 7 | kill.sh |
|
| Details | Domain | 1 | glue.tf |
|
| Details | File | 1 | extract_creds.py |
|
| Details | File | 1 | cloudgoat_key.pub |
|
| Details | File | 1 | ultra_secret.txt |
|
| Details | IPv4 | 88 | 169.254.169.254 |
|
| Details | Url | 2 | http://169.254.169.254/. |