List Beanstalk applications#

aws elasticbeanstalk describe-applications --profile <profile>

Entry point for hunting app configs and env vars.

List environments for an app#

aws elasticbeanstalk describe-environments --application-name <AppName> --profile <profile>

Each environment is a deployed version of the app.

Get environment config#

aws elasticbeanstalk describe-configuration-settings --application-name <AppName> --environment-name <EnvName> --profile <profile>

🔥 High-value target: often leaks AWS keys, DB creds, API tokens in environment variables.

Using Pacu#

Pacu (low_priv_sess:imported-low_priv_sess) > run elasticbeanstalk__enum --regions us-east-1