terraform-aws-ebs-snapshot-publicly-exposed. Offensive Terraform module which copies publicly exposed EBS snapshot to us-east-1 region in attacker's AWS account and creates EBS volume from the copied EBS snapshot. After that, the module attaches and mounts the EBS volume to an EC2 instance. Finally, attacker can ssh into an EC2 instance and inspect a mounted volume "/usr/src/hack".

github.com/sottlmarek/terraform-aws-ebs-snapshot-publicly-exposed

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.