SSRF Attack: Trials and Tribulations
Sajjad Khan
September 25, 2022
No Comments
I mostly wanted to share this post not because it’s a novel and unique attack, but to show the thought process of attacking this particular
Menu
Writeups
Tag: cloud security writeups
Read More »
Exploiting AWS IAM Security permissions Part 2
Sajjad Khan
September 17, 2022
No Comments
Introduction In part 1 we compromised an account with multiple permissions, but no Administrator access. We found a potential role that would allow us to escalate privileges,
Exploiting AWS IAM permissions Part 1
Sajjad Khan
September 17, 2022
No Comments
Introduction This is a real case study of how to enumerate and use AWS IAM permissions to your advantage. I strongly suggest you read my previous article on how
