UpdateLoginProfile

iam:UpdateLoginProfile to reset the console password of a more privileged user and take over their sign-in.

1 ನಿಮಿಷದ ಓದುಅಕ್ಟೋ 5,2026 ರಂದು ನವೀಕರಿಸಲಾಗಿದೆflorianamette1 ಕೊಡುಗೆದಾರ
ನಿಮ್ಮ ಸಹಾಯಕವನ್ನು ಕೇಳಿ (MCP)GitHub ನಲ್ಲಿ ಸಂಪಾದಿಸಿ

iam:UpdateLoginProfile resets the console password of a user that already has a login profile. Against a more privileged user, set a password you know and sign in as them.

Reset the password#

bash
aws iam update-login-profile --user-name <privileged-user> \
  --password 'Newpass123!' --no-password-reset-required

Exploitation notes#

  • This is disruptive if the user actively signs in, since their old password stops working, so it is a deliberate choice against accounts that are not in interactive use.
  • If the target has no profile yet, use CreateLoginProfile instead.
  • Console MFA, where enforced, still gates sign-in even after a password reset.

Tools#

  • AWS CLI (iam update-login-profile).
  • Pacu (iam__privesc_scan).

References#

ಹಿಂದಿನದುCreateLoginProfileಮುಂದಿನದು Group membership