Alec Chappell and GitHub
9c2191ecae
Fix typo in README regarding cloud pivoting
...
typo to 'cloud'
2025-10-31 10:10:38 -04:00
HackTricks News Bot
7cc4479e64
Add content from: Vulnerabilities in LUKS2 disk encryption for confidential VM...
2025-10-30 13:14:27 +00:00
searabbit and GitHub
9ae10ba9d7
Add db cluster enumeration commands to aws-relational-database-rds-enum
2025-10-30 08:52:49 +01:00
searabbit and GitHub
9a4644dc0f
Add rds cluster snapshots enumeration commands to aws-rds-unauthenticated-enum
2025-10-30 08:46:18 +01:00
carlospolop
3a7f081f42
Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud
2025-10-26 00:25:07 +02:00
carlospolop
d4dcccb82d
f
2025-10-26 00:25:04 +02:00
SirBroccoli and GitHub
469887faef
Merge branch 'master' into update_Breaking_MCP_Server_Hosting__Build-Context_Path_Tr_20251025_123530
2025-10-25 17:39:32 +02:00
SirBroccoli and GitHub
9968ab5901
Update SUMMARY.md
2025-10-25 17:39:11 +02:00
SirBroccoli and GitHub
92ec260969
Update docker-build-context-abuse.md
2025-10-25 17:38:18 +02:00
carlospolop
5775dd889f
f
2025-10-25 17:36:44 +02:00
SirBroccoli and GitHub
6e9d109c8e
Add new AWS post exploitation entries to SUMMARY.md
2025-10-25 17:35:38 +02:00
HackTricks News Bot
1c91bb9cf9
Add content from: Breaking MCP Server Hosting: Build-Context Path Traversal to...
2025-10-25 12:37:57 +00:00
HackTricks News Bot
2a67405a78
Add content from: Cloud Discovery With AzureHound
2025-10-25 01:21:33 +00:00
SirBroccoli and GitHub
a41bcbce89
Merge pull request #226 from AI-redteam/mwaa-post-exploitation
...
Mwaa post exploitation
2025-10-23 23:50:25 +02:00
Ben and GitHub
3f8aa12ce9
Update README to specify Airflow DAG permissions
...
Clarified that all Airflow DAGs run with the execution role's permissions.
2025-10-23 16:26:48 -05:00
Ben and GitHub
8c472fbf01
Revise README for AWS MWAA execution role vulnerability
...
Updated README to reflect the AWS MWAA execution role vulnerability and its implications for security, including detailed attack vectors
2025-10-23 16:25:37 -05:00
carlospolop
b0d0266670
Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud
2025-10-23 21:30:26 +02:00
carlospolop
d56be2b9b2
f
2025-10-23 21:30:22 +02:00
Ben and GitHub
65a1490ad0
Update README to clarify policy tightening process
...
Clarified the process of tightening the policy after deployment and the implications for defenders.
2025-10-23 13:24:27 -05:00
Ben and GitHub
0d4fb441a9
Add README for AWS MWAA post-exploitation
...
fix location and structure
2025-10-23 13:20:36 -05:00
SirBroccoli and GitHub
98e8a9cc67
Merge branch 'master' into master
2025-10-23 15:41:13 +02:00
SirBroccoli and GitHub
9f2ba6206d
Merge branch 'master' into update_FlareProx__Deploy_Cloudflare_Worker_pass-through_p_20251014_125039
2025-10-23 15:27:47 +02:00
SirBroccoli and GitHub
9665e1fced
Update cloudflare-workers-pass-through-proxy-ip-rotation.md
2025-10-23 15:26:40 +02:00
carlospolop
400cf2a607
f
2025-10-23 15:15:45 +02:00
carlospolop
06c0c04ebd
reorg bedrock
2025-10-23 14:16:30 +02:00
SirBroccoli and GitHub
98eb150b91
Merge pull request #221 from HackTricks-wiki/update_When_AI_Remembers_Too_Much___Persistent_Behaviors__20251010_011705
...
When AI Remembers Too Much – Persistent Behaviors in Agents’...
2025-10-23 14:12:19 +02:00
SirBroccoli and GitHub
468bd28887
Fix XML delimiter formatting and enhance security details
...
Updated formatting of XML delimiters in the documentation to use backticks for clarity. Enhanced explanations regarding memory injection vulnerabilities and defensive measures.
2025-10-23 14:11:10 +02:00
SirBroccoli and GitHub
d4d7511794
Merge pull request #220 from HackTricks-wiki/update_Skimming_Credentials_with_Azure_s_Front_Door_WAF_20251009_182735
...
Skimming Credentials with Azure's Front Door WAF
2025-10-23 14:05:38 +02:00
SirBroccoli and GitHub
45b2e5e0a8
Update az-front-door.md
2025-10-23 14:05:23 +02:00
JaimePolop
e7a5f0fe28
cloudfront
2025-10-23 13:46:06 +02:00
Jaime Polop and GitHub
1a856147be
Merge branch 'HackTricks-wiki:master' into master
2025-10-23 13:10:02 +02:00
carlospolop
47c4cdb89b
f
2025-10-23 12:53:05 +02:00
carlospolop
e09246386b
f
2025-10-23 12:48:56 +02:00
JaimePolop
e4e6a409ce
update
2025-10-22 23:26:58 +02:00
Ben and GitHub
6fc8a8126e
Add AWS MWAA post-exploitation documentation
...
Document the security risks and attack vectors associated with AWS MWAA's execution role, including data exfiltration and command and control channels.
2025-10-21 18:46:40 -05:00
carlospolop
08c2e42b76
f
2025-10-17 17:37:06 +02:00
HackTricks News Bot
01e37a9b81
Add content from: FlareProx: Deploy Cloudflare Worker pass-through proxies for...
...
- Remove searchindex.js (auto-generated file)
2025-10-14 12:54:14 +00:00
carlospolop
1719f8ed3c
f
2025-10-13 22:42:54 +02:00
HackTricks News Bot
95d13f8b89
Add content from: When AI Remembers Too Much – Persistent Behaviors in Agents’...
...
- Remove searchindex.js (auto-generated file)
2025-10-10 01:20:09 +00:00
HackTricks News Bot
123b37d1f3
Add content from: Skimming Credentials with Azure's Front Door WAF
...
- Remove searchindex.js (auto-generated file)
2025-10-09 18:29:08 +00:00
carlospolop
9df8a4ac92
organize aws + new attacks
2025-10-09 12:26:40 +02:00
carlospolop
6dd86b2c9e
rds post recheck
2025-10-07 17:28:10 +02:00
carlospolop
95302db34c
AWS RDS post-exploitation: Out-of-band SQL via Data API + master password reset (Aurora)
2025-10-07 14:04:48 +02:00
SirBroccoli and GitHub
90bd042880
Merge pull request #219 from JaimePolop/master
...
IAM and KMS Post Exploitation extended
2025-10-07 11:02:17 +02:00
SirBroccoli and GitHub
1077cf6f89
Update AWS KMS post-exploitation documentation
...
Clarified KMS policy restrictions and updated ransomware sections.
2025-10-07 11:02:01 +02:00
carlospolop
27fd007fdd
lambda attacks recheck
2025-10-07 00:41:18 +02:00
JaimePolop
29e379d07d
IAM and KMS Post Exploitation extended
2025-10-06 19:01:11 +02:00
carlospolop
83663e4f98
dynamoDB attacks recheck
2025-10-06 13:14:59 +02:00
carlospolop
b5b72b0d26
Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud
2025-10-06 11:53:38 +02:00
carlospolop
0f213ea2db
aws secrets manager recheck
2025-10-06 11:53:33 +02:00