AWS - Lightsail Persistence

Reading time: 2 minutes

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE) Jifunze na fanya mazoezi ya Azure Hacking: HackTricks Training Azure Red Team Expert (AzRTE)

Support HackTricks

Lightsail

For more information check:

AWS - Lightsail Enum

Pakua SSH keys za instance & nywila za DB

Labda hazitabadilika, hivyo kuzikuwa nazo ni chaguo nzuri kwa persistence

Backdoor Instances

Muvamizi anaweza kupata ufikiaji wa instances na kuzi-backdoor:

  • Kutumia rootkit ya jadi kwa mfano
  • Kuongeza public SSH key mpya
  • Kufungua port kwa port knocking pamoja na backdoor

DNS persistence

Ikiwa domains zimewekwa:

  • Unda subdomain inayoelekeza IP yako ili uwe na subdomain takeover
  • Tengeneza rekodi ya SPF ikikuruhusu kutuma emails kutoka kwa domain
  • Sanidi main domain IP to your own one na fanya MitM kutoka IP yako hadi zile halali

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE) Jifunze na fanya mazoezi ya Azure Hacking: HackTricks Training Azure Red Team Expert (AzRTE)

Support HackTricks