How do you know what permissions compromised AWS credentials actually have? Brute force them. enumerate-iam tests safe API calls to map your access. Just note: this is loud and will light up CloudTrail.
buff.lyBrute Force IAM Permissions - Hacking The CloudBrute force the IAM permissions of a user or role to see what you have access to.
0 reposts0 likes