Update aws-sagemaker-persistence.md

This commit is contained in:
SirBroccoli
2025-08-01 11:47:18 +02:00
committed by GitHub
parent ed2ae1e58f
commit 6f8738f34f

View File

@@ -2,8 +2,6 @@
{{#include ../../../banners/hacktricks-training.md}}
# AWS - SageMaker Lifecycle Configuration Persistence
## Overview of Persistence Techniques
This section outlines methods for gaining persistence in SageMaker by abusing Lifecycle Configurations (LCCs), including reverse shells, cron jobs, credential theft via IMDS, and SSH backdoors. These scripts run with the instances IAM role and can persist across restarts. Most techniques require outbound network access, but usage of services on the AWS control plane can still allow success if the environment is in 'VPC-only" mode.