github/metasploit-framework
1
Fork 0
mirror of https://github.com/rapid7/metasploit-framework synced 2024-08-28 23:26:18 +02:00
Code Releases Activity

Initial concept for AWS EC2 enumeration

Browse Source
This commit is contained in:
asoto-r7 2019-06-11 19:01:22 -05:00
parent b1793f2d50
commit f96de95acc
No known key found for this signature in database
GPG Key ID: F531810B7FE55396
2 changed files with 109 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
metasploit-framework.gemspec
View File

@ -198,4 +198,17 @@ Gem::Specification.new do |spec|
spec.add_runtime_dependency 'faker'
# Pinned as a dependency of i18n to the last working version
spec.add_runtime_dependency 'concurrent-ruby','1.0.5'
# AWS enumeration modules
spec.add_runtime_dependency 'aws-sdk-s3'
spec.add_runtime_dependency 'aws-sdk-ec2'
spec.add_runtime_dependency 'aws-sdk-eks'
spec.add_runtime_dependency 'aws-sdk-iam'
spec.add_runtime_dependency 'aws-sdk-sqs'
spec.add_runtime_dependency 'aws-sdk-kms'
spec.add_runtime_dependency 'aws-sdk-rds'
spec.add_runtime_dependency 'aws-sdk-rdsdataservice'
spec.add_runtime_dependency 'aws-sdk-route53'
spec.add_runtime_dependency 'aws-sdk-route53domains'
spec.add_runtime_dependency 'aws-sdk-route53resolver'
end

96
modules/auxiliary/cloud/aws/ec2_enumerate.rb Normal file
View File

@ -0,0 +1,96 @@
##
# This module requires Metasploit: https://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
##
require 'aws-sdk-ec2'
class MetasploitModule < Msf::Auxiliary
def initialize(info = {})
super(
update_info(
info,
'Name' => 'Amazon Web Services EC2 instance enumeration',
'Description' => %q(
Provided AWS credentials, this module will call the authenticated
API of Amazon Web Services to list all EC2 instances associated
with the account
),
'Author' => ['Aaron Soto <aaron.soto@rapid7.com>'],
'License' => MSF_LICENSE
)
)
register_options(
[
OptString.new('REGION', [false, 'AWS Region (eg. "us-west-2")']),
OptString.new('ACCESS_KEY_ID', [true, 'AWS Access Key ID (eg. "AKIAXXXXXXXXXXXXXXXX")', '']),
OptString.new('SECRET_ACCESS_KEY', [true, 'AWS Secret Access Key (eg. "CA1+XXXXXXXXXXXXXXXXXXXXXX6aYDHHCBuLuV79")', ''])
]
)
end
def enumerate_regions
regions = []
ec2 = Aws::EC2::Resource.new(
region: 'us-west-1',
access_key_id: datastore['ACCESS_KEY_ID'],
secret_access_key: datastore['SECRET_ACCESS_KEY']
)
ec2_regions = ec2.client.describe_regions.data.regions
ec2_regions.each do |r|
regions.append(r.region_name)
end
return regions
end
def describe_ec2_instance(i)
print_good " #{i.id} (#{i.state.name})"
print_good " Creation Date: #{i.launch_time}"
print_good " Public IP: #{i.public_ip_address} (#{i.public_dns_name})"
print_good " Private IP: #{i.public_ip_address} (#{i.private_dns_name})"
i.security_groups.each do |s|
print_good " Security Group: #{s.group_id}"
end
end
def handle_aws_errors(e)
if e.class.parents.include?(Aws)
fail_with(Failure::UnexpectedReply, e.message)
else
raise e
end
end
def run
begin
if datastore['REGION']
regions = [datastore['REGION']]
else
regions = enumerate_regions()
end
regions.each do |region|
vprint_status "Checking #{region}..."
ec2 = Aws::EC2::Resource.new(
region: region,
access_key_id: datastore['ACCESS_KEY_ID'],
secret_access_key: datastore['SECRET_ACCESS_KEY']
)
if ec2.instances.count > 0
print_good "Found #{ec2.instances.count} instances in #{region}:"
ec2.instances.each do |i|
describe_ec2_instance(i)
end
end
end
rescue ::Exception => e
handle_aws_errors(e)
end
end
end