AWS - API Gateway Persistence

Reading time: 2 minutes

tip

AWS 해킹 배우기 및 연습하기:HackTricks Training AWS Red Team Expert (ARTE)
GCP 해킹 배우기 및 연습하기: HackTricks Training GCP Red Team Expert (GRTE) Azure 해킹 배우기 및 연습하기: HackTricks Training Azure Red Team Expert (AzRTE)

HackTricks 지원하기

API Gateway

자세한 정보는 다음을 참조하세요:

AWS - API Gateway Enum

리소스 정책

Modify the resource policy of the API gateway(s) to grant yourself access to them

Lambda Authorizers 수정

Modify the code of lambda authorizers to grant yourself access to all the endpoints.
Or just remove the use of the authorizer.

IAM 권한

If a resource is using IAM authorizer you could give yourself access to it modifying IAM permissions.
Or just remove the use of the authorizer.

API Keys

If API keys are used, you could leak them to maintain persistence or even create new ones.
Or just remove the use of API keys.

tip

AWS 해킹 배우기 및 연습하기:HackTricks Training AWS Red Team Expert (ARTE)
GCP 해킹 배우기 및 연습하기: HackTricks Training GCP Red Team Expert (GRTE) Azure 해킹 배우기 및 연습하기: HackTricks Training Azure Red Team Expert (AzRTE)

HackTricks 지원하기