Bypass GuardDuty Pentest Findings for the AWS CLI - Botocore method.

[jchrisfarris]

You can override the user-agent (to bypass GuardDuty Kali detections) with the botocore.config.Config option.

[Frichetten]

Hey hey 👋 This is for the AWS SDK, right? Are you able to change this with the CLI?

[saw-your-packet]

I played with this a bit and I managed to make it work to a certain point. First, yes, the limitation is that this applies only to the SDK. Second, whatever user agent you sent, the boto3 SDK will append at the end "Boto3/Python" or a similar string (can't remember exactly the string value).

This is cool for writing your own scripts, but if you plan to use the tool of others, I would recommend the Burp Suite approach because modifying existing tools might break stuff.