Skip to content
attack.paths
Connexion
← LibraryTechnique entry
C-AWS-IAM-ADDUSER-POLICYPrivilege Escalation

AWS iam:AttachUserPolicy → AdminAccess

AttachUserPolicy on self with AdministratorAccess — instant root if the principal has the permission.

§ Where this technique fits

C-AWS-IAM-ADDUSER-POLICY is catalogued under the Privilege Escalation tactic of the offensive-security kill-chain. It appears in 1 approved dossier in the registry, typically at step 8 on average.

§ Dossiers chaining this technique

§ What commonly comes next

  1. 01
    AWS IAM Backdoor User / Access Key
    C-AWS-IAM-BACKDOOR · Persistence
    seen 1×