AWS - SES Post Exploitation

Reading time: 3 minutes

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE) Jifunze na fanya mazoezi ya Azure Hacking: HackTricks Training Azure Red Team Expert (AzRTE)

Support HackTricks

SES

Kwa maelezo zaidi angalia:

AWS - SES Enum

ses:SendEmail

Tuma barua pepe.

bash
aws ses send-email --from sender@example.com --destination file://emails.json --message file://message.json
aws sesv2 send-email --from sender@example.com --destination file://emails.json --message file://message.json

Bado kupima.

ses:SendRawEmail

Tuma barua pepe.

bash
aws ses send-raw-email --raw-message file://message.json

Bado kujaribu.

ses:SendTemplatedEmail

Tuma barua pepe kulingana na kigezo.

bash
aws ses  send-templated-email --source <value> --destination <value> --template <value>

Bado kujaribu.

ses:SendBulkTemplatedEmail

Tuma barua pepe kwa maeneo mengi

bash
aws ses send-bulk-templated-email --source <value> --template <value>

Bado kujaribu.

ses:SendBulkEmail

Tuma barua pepe kwa maeneo mengi.

aws sesv2 send-bulk-email --default-content <value> --bulk-email-entries <value>

ses:SendBounce

Tuma barua pepe ya kurudi juu ya barua pepe iliyopokelewa (ikiashiria kwamba barua pepe haikuweza kupokelewa). Hii inaweza kufanywa hadi masaa 24 baada ya kupokea barua pepe.

bash
aws ses send-bounce --original-message-id <value> --bounce-sender <value> --bounced-recipient-info-list <value>

Bado kujaribu.

ses:SendCustomVerificationEmail

Hii itatuma barua pepe ya uthibitisho iliyobinafsishwa. Unaweza kuhitaji ruhusa pia kuunda barua pepe ya kiolezo.

bash
aws ses send-custom-verification-email --email-address <value> --template-name <value>
aws sesv2 send-custom-verification-email --email-address <value> --template-name <value>

Bado kujaribu.

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE) Jifunze na fanya mazoezi ya Azure Hacking: HackTricks Training Azure Red Team Expert (AzRTE)

Support HackTricks