New Pacu Module Secret Enumeration in Elastic Beanstalk

[carlospolop]

🤖 Automated Content Update

This PR was automatically generated by the HackTricks News Bot based on a technical blog post.

📝 Source Information

• Blog URL: https://rhinosecuritylabs.com/tools/new-pacu-module-enumerating-elastic-beanstalk
• Blog Title: New Pacu Module: Secret Enumeration in Elastic Beanstalk
• Suggested Section: AWS Pentesting → AWS - Post Exploitation → AWS - Elastic Beanstalk Post Exploitation, with cross-references to AWS - Privilege Escalation and Pacu/AWS enumeration

🎯 Content Summary

Scope and severity. The post introduces Rhino Security Labs' Pacu module elasticbeanstalk__enum, created after an AWS penetration test found credentials in Elastic Beanstalk. This is not a CVE-specific software vulnerability; it automates discovery of a cloud secret-exposure misconfiguration in which AWS keys, database passwords, API tokens, or other sensitive values are stored in Elastic Beanstalk environment properties or deployed application source code. The i...

🔧 Technical Details

Elastic Beanstalk configuration-secret extraction. In an authorized AWS assessment, enumerate Elastic Beanstalk applications and environments, then call DescribeConfigurationSettings for each environment. Inspect the returned configuration settings and OptionSettings values because developers may have placed AWS access keys, secret keys, database credentials, API tokens, or connection strings there. Any recovered AWS credentials can be validated with aws sts get-caller-identity and used according to the permissions of the authenticated IAM principal. ([rhinosecuritylabs.com](https://rhinosecuritylabs.com/tools/new-pacu-module-enumerating-elastic-beanstalk))

Deployment-artifact secret mining. Obtain an environment's current VersionLabel, call DescribeApplicationVersions with that label, extract SourceBundle.S3Bucket and SourceBundle.S3Key, and download th...

🤖 Agent Actions

ERROR: Codex exec failed (exit=1).
{"type":"thread.started","thread_id":"01a11817-9736-7930-9b87-1bd8cb127af3"}
{"type":"item.completed","item":{"id":"item_0","type":"error","message":"Model metadata for gpt-6.1-sol not found. Defaulting to fallback metadata; this can degrade performance and cause issues."}}
{"type":"turn.started"}
{"type":"error","message":"{"type":"error","status":400,"error":{"type":"invalid_request_error","message":"The 'gpt-6.1-sol' model is not supported when using Codex with a ChatGPT account."}}"}
{"type":"turn.failed","error":{"message":"{"type":"error","status":400,"error":{"type":"invalid_request_error","message":"The 'gpt-6.1-sol' model is not supported when using Codex with a ChatGPT account."}}"}}
MCP startup status: {"tool_names":["brave_search","check_budget_status","exec","search_google_web"],"error":""}

---

This PR was automatically created by the HackTricks Feed Bot. Please review the changes carefully before merging.

📚 Repository Maintenance

• MD files processed: 1751
• MD files fixed: 44

All .md files have been checked for proper formatting (headers, includes, etc.).

[carlospolop]

🔗 Additional Context

Original Blog Post: https://rhinosecuritylabs.com/tools/new-pacu-module-enumerating-elastic-beanstalk

Content Categories: Based on the analysis, this content was categorized under "AWS Pentesting → AWS - Post Exploitation → AWS - Elastic Beanstalk Post Exploitation, with cross-references to AWS - Privilege Escalation and Pacu/AWS enumeration".

Repository Maintenance:

• MD Files Formatting: 1751 files processed (44 files fixed)

Review Notes:

• This content was automatically processed and may require human review for accuracy
• Check that the placement within the repository structure is appropriate
• Verify that all technical details are correct and up-to-date
• All .md files have been checked for proper formatting (headers, includes, etc.)

Bot Version: HackTricks News Bot v1.0