rzhade3 / terraform-aws-lambda-function-credential-exfiltration

Offensive Terraform module which creates Lambda function with existing IAM role. The module invokes it automatically to exfiltrate AWS temporary credential from environment variables and send it back with response.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

AWS Lambda Function Credential Exfiltration

OffensiveTerraform OffensiveTerraform OffensiveTerraform

Offensive Terraform module which creates Lambda function with existing IAM role. The module invokes it automatically to exfiltrate AWS temporary credential from environment variables and send it back with response.

Attack Diagram

Usage

module "lambda-function-credential-exfiltration" {
    source  = "offensive-terraform/lambda-function-credential-exfiltration/aws"

    role_arn = "arn:aws:iam::000000000000:role/lambda-role-name"
}

output "lambda_credential" {
  value = module.lambda-function-credential-exfiltration.lambda_credential
}

Author

Module managed by https://github.com/iganbold

About

Offensive Terraform module which creates Lambda function with existing IAM role. The module invokes it automatically to exfiltrate AWS temporary credential from environment variables and send it back with response.

License:Apache License 2.0


Languages

Language:HCL 71.2%Language:JavaScript 28.8%