AWS - SES Post Exploitation

Reading time: 3 minutes

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE) Jifunze na fanya mazoezi ya Azure Hacking: HackTricks Training Azure Red Team Expert (AzRTE)

Support HackTricks

SES

Kwa taarifa zaidi angalia:

AWS - SES Enum

ses:SendEmail

Tuma barua pepe.

bash
aws ses send-email --from sender@example.com --destination file://emails.json --message file://message.json
aws sesv2 send-email --from sender@example.com --destination file://emails.json --message file://message.json

Bado haijajaribiwa.

ses:SendRawEmail

Tuma barua pepe.

bash
aws ses send-raw-email --raw-message file://message.json

Bado haijajaribiwa.

ses:SendTemplatedEmail

Tuma barua pepe kwa kutumia kiolezo.

bash
aws ses  send-templated-email --source <value> --destination <value> --template <value>

Bado inahitaji kujaribiwa.

ses:SendBulkTemplatedEmail

Tuma barua pepe kwa anwani nyingi

bash
aws ses send-bulk-templated-email --source <value> --template <value>

Bado haijajaribiwa.

ses:SendBulkEmail

Tuma barua pepe kwa wapokeaji wengi.

aws sesv2 send-bulk-email --default-content <value> --bulk-email-entries <value>

ses:SendBounce

Tuma bounce email juu ya barua pepe uliopokea (ikionyesha kwamba barua pepe haikuweza kupokelewa). Hii inaweza kufanywa tu hadi saa 24 baada ya kupokea barua pepe.

bash
aws ses send-bounce --original-message-id <value> --bounce-sender <value> --bounced-recipient-info-list <value>

Bado haijajaribiwa.

ses:SendCustomVerificationEmail

Hii itatuma barua pepe ya uthibitisho iliyobinafsishwa. Huenda ukahitaji ruhusa pia za kuunda barua pepe ya kiolezo.

bash
aws ses send-custom-verification-email --email-address <value> --template-name <value>
aws sesv2 send-custom-verification-email --email-address <value> --template-name <value>

Bado haijajaribiwa.

tip

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE) Jifunze na fanya mazoezi ya Azure Hacking: HackTricks Training Azure Red Team Expert (AzRTE)

Support HackTricks