Pathrunner — AWS Privilege Escalation

Pathrunner — AWS Privilege Escalation

A modular AWS privilege escalation framework from Datadog that automates the exploitation of AWS IAM privilege escalation paths. It helps determine whether existing permissions can be used to gain access as another AWS identity. The tool includes 81 exploit modules across 24 AWS services.

Key features: • Payload selection — lets you choose from multiple payloads for each exploit module based on environmental constraints, such as extracting credentials or creating a new user. • Switching between identities — obtained credentials are automatically imported and made available for subsequent attack steps. • Attacker infrastructure deployment — deploys infrastructure in a separate AWS account to collect credentials obtained during exploitation. • Resource tracking and cleanup — tracks created and modified resources, generates a report of changes, and provides commands to clean up created resources after testing.

The project is complemented by a catalog of techniques at pathfinding.cloud and training labs at Pathfinding Labs. The catalog documents AWS IAM privilege escalation paths, while the labs let you deploy a vulnerable AWS environments in your own account and practice exploiting these paths.

Article: https://securitylabs.datadoghq.com/articles/introducing-pathrunner-aws-privilege-escalation-framework/

Tool: https://github.com/DataDog/pathrunner