Skip to content

Add article: enumerate AWS metadata via IAM condition keys - #505

Open
raajheshkannaa wants to merge 1 commit into
Hacking-the-Cloud:mainfrom
raajheshkannaa:feat/conditional-love-enumeration
Open

Add article: enumerate AWS metadata via IAM condition keys#505
raajheshkannaa wants to merge 1 commit into
Hacking-the-Cloud:mainfrom
raajheshkannaa:feat/conditional-love-enumeration

Conversation

@raajheshkannaa

Copy link
Copy Markdown
Contributor

Closes #478

Covers the conditional-love technique by Daniel Grzelak (Plerion) that generalizes Ben Bridts' S3 account ID enumeration to multiple AWS services and condition types.

  • Explains the IAM condition key oracle technique (StringLike + wildcards)
  • Documents what can be enumerated: account IDs, org IDs, org paths, tag values
  • Lists supported services (S3, Lambda URLs, API Gateway, STS, SQS, Data Exchange)
  • Includes usage example for the conditional-love tool
  • Covers security implications and mitigations

Placed under AWS > Enumeration alongside the existing account_id_from_s3_bucket.md article.

@raajheshkannaa
raajheshkannaa force-pushed the feat/conditional-love-enumeration branch from b69a4ed to 78e9817 Compare May 7, 2026 02:22
@raajheshkannaa
raajheshkannaa force-pushed the feat/conditional-love-enumeration branch from 78e9817 to 0f84c65 Compare May 27, 2026 03:07
Covers the conditional-love technique by Daniel Grzelak (Plerion) that
generalizes Ben Bridts' S3 account ID enumeration to multiple services
and condition types including org IDs and resource tags.

Closes Hacking-the-Cloud#478
@raajheshkannaa
raajheshkannaa force-pushed the feat/conditional-love-enumeration branch from 0f84c65 to 33a94bd Compare September 2, 2026 12:46
@raajheshkannaa

Copy link
Copy Markdown
Contributor Author

Bump on this one. It hasn't drawn a review since it went up in April.

It's a single file, content/aws/enumeration/enumerate_metadata_via_iam_condition_keys.md, covering metadata enumeration through IAM condition keys, per #478. Rebased on main, and there are no checks to run.

Glad to trim it or restructure the framing if it doesn't fit how you want the enumeration section to read.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

https://github.com/plerionhq/conditional-love

1 participant