Commit Graph

973 Commits

Author SHA1 Message Date
Carlos Polop 2a4cc7c428 Document Azure MI token discovery limits 2026-05-05 17:45:43 +02:00
Carlos Polop 406b2549aa Replace brittle managed identity enumeration examples 2026-05-05 16:27:01 +02:00
Carlos Polop 393c6997b1 Clarify Azure WireServer access contexts 2026-05-05 16:16:00 +02:00
SirBroccoli 2f2df45366 Update README.md 2026-05-05 15:31:53 +02:00
Jimmy 6f461640c2 Add WireServer & GoalState 2026-05-05 14:33:29 +02:00
Jimmy b0cd651c8d Add WireServer & GoalState 2026-05-05 14:25:14 +02:00
SirBroccoli a80e28427b Merge pull request #285 from ZoneMix/master
Update User Password Addition
2026-05-03 10:45:20 +02:00
SirBroccoli 7f789f1bc1 Merge pull request #284 from 0x1347/arte-veue
arte-veue
2026-05-03 10:44:53 +02:00
ZoneMix cee4c97967 Update user password update privilege escalation technique 2026-05-02 17:05:49 -05:00
Carlos Polop 95ec89cc7b f 2026-05-01 00:29:47 +02:00
Carlos Polop 6447449ade Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud 2026-04-30 21:29:49 +02:00
Carlos Polop bc899d4b0b f 2026-04-30 21:29:35 +02:00
SirBroccoli c27dd45393 Merge pull request #283 from HackTricks-wiki/update_The_npm_Threat_Landscape__Attack_Surface_and_Mitig_20260425_021054
The npm Threat Landscape Attack Surface and Mitigations
2026-04-28 01:25:02 +02:00
SirBroccoli 627ae260b8 Merge pull request #277 from HackTricks-wiki/update_Cracks_in_the_Bedrock__Escaping_the_AWS_AgentCore__20260408_020957
Cracks in the Bedrock Escaping the AWS AgentCore Sandbox
2026-04-28 01:23:06 +02:00
0x1337 2e66838b27 arte-veue 2026-04-28 00:10:52 +02:00
HackTricks News Bot 7ca12b41ef Add content from: The npm Threat Landscape: Attack Surface and Mitigations 2026-04-25 02:14:06 +00:00
SirBroccoli 979375b432 Merge pull request #280 from Local-Guy-123/local-guy-ssm-update-doc-privesc-persist
arte-Hex-Editor
2026-04-21 10:19:44 +02:00
SirBroccoli c7d8d96af8 Merge pull request #281 from jFriedli/arte-jfriedli-aws-bedrock-lambda-privesc
AWS Bedrock: Add Lambda Tool Hijacking Privilege Escalation (Agent Action Groups)
2026-04-21 10:18:55 +02:00
Jonas Friedli cda5427488 add some corrections 2026-04-21 08:56:09 +02:00
Jonas Friedli 6cdf2b2e14 Add Bedrock agent Lambda tool hijacking privilege escalation technique 2026-04-21 08:42:31 +02:00
Local-Guy-123 2008a8e33e Adding 2 additional SSM PrivEsc and Persistence Paths 2026-04-20 21:03:08 -04:00
Carlos Polop 913bcb0f09 f 2026-04-19 12:54:23 +02:00
Carlos Polop 889c2aab05 f 2026-04-13 20:01:42 +02:00
Carlos Polop 05c82f4398 Restore 4/5 BSA, 1/5 legacy ad split 2026-04-08 19:06:44 +02:00
Carlos Polop 28ce890dde Temp: BSA ads 5/5 times for verification 2026-04-08 16:51:11 +02:00
HackTricks News Bot f0d0e56d5a Add content from: Cracks in the Bedrock: Escaping the AWS AgentCore Sandbox 2026-04-08 02:16:50 +00:00
SirBroccoli 36d8f39a65 Merge pull request #274 from HackTricks-wiki/update_When_an_Attacker_Meets_a_Group_of_Agents__Navigati_20260404_020203
When an Attacker Meets a Group of Agents Navigating Amazon B...
2026-04-07 17:20:05 +02:00
Carlos Polop 57bd71e076 f 2026-04-07 15:45:46 +02:00
SirBroccoli 10e13b14bd Merge pull request #276 from HackTricks-wiki/pr-271
Expand GitHub Actions cache poisoning docs with Angular 2026 + Cacheract demo
2026-04-07 14:59:12 +02:00
Carlos Polop d5a2d0c59a f 2026-04-07 14:57:48 +02:00
SirBroccoli cccacb7ee1 Merge pull request #271 from HackTricks-wiki/update_Double_Agents__Exposing_Security_Blind_Spots_in_GC_20260331_131528
Double Agents Exposing Security Blind Spots in GCP Vertex AI
2026-04-07 14:27:51 +02:00
Carlos Polop 6b2c22a0f3 Normalize Vertex AI docs to enum/privesc/post-exploitation structure 2026-04-07 14:24:55 +02:00
SirBroccoli 941e8d69e6 Merge pull request #272 from HackTricks-wiki/update_Weaponizing_the_Protectors__TeamPCP_s_Multi-Stage__20260401_021730
Weaponizing the Protectors TeamPCP’s Multi-Stage Supply Chai...
2026-04-07 14:24:20 +02:00
HackTricks News Bot 9be9471b07 Add content from: When an Attacker Meets a Group of Agents: Navigating Amazon ... 2026-04-04 02:05:33 +00:00
SirBroccoli 55277879e8 Merge pull request #273 from thomaspreece/master
Add new CodeBuild credential leakage technique
2026-04-01 14:33:12 +02:00
Thomas Preece a0ce4e47be Add new CodeBuild Credential leakage technique 2026-04-01 08:01:37 +01:00
HackTricks News Bot 9fe9a78f57 Add content from: Weaponizing the Protectors: TeamPCP’s Multi-Stage Supply Cha... 2026-04-01 02:22:22 +00:00
SirBroccoli 06110601f6 Merge pull request #269 from HackTricks-wiki/update_Full_Disclosure__A_Third__and_Fourth__Azure_Sign-I_20260319_185745
Full Disclosure A Third (and Fourth) Azure Sign-In Log Bypas...
2026-03-31 18:46:42 +02:00
SirBroccoli 0172f076fc Merge pull request #270 from thug-gamer/patch-1
fix saml_forge.py script; fix typo
2026-03-31 18:36:55 +02:00
HackTricks News Bot f69b96a436 Add content from: Double Agents: Exposing Security Blind Spots in GCP Vertex A... 2026-03-31 13:21:35 +00:00
thug-gamer 5abaa4136c arte-leobalt - fix saml_forge.py script; fix typo 2026-03-31 11:36:49 +02:00
HackTricks News Bot 34568ac762 Add content from: Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypa... 2026-03-19 19:03:11 +00:00
Carlos Polop 31812d3f9d f 2026-03-17 21:13:33 +01:00
Carlos Polop 9cee22441f f 2026-03-17 20:07:35 +01:00
SirBroccoli 126ea6644d Merge pull request #266 from HackTricks-wiki/update_How_to_detect_and_respond_to_OAuth_consent_attacks_20260304_184649
How to detect and respond to OAuth consent attacks in Google...
2026-03-17 19:42:55 +01:00
SirBroccoli 2bd82aa2a5 Merge pull request #267 from bka-dev/master
Update README.md
2026-03-17 19:42:23 +01:00
Bastian Kanbach 61f7d2a71b Update README.md
Updated URL of TeamsEnum Repository
2026-03-16 16:34:57 +01:00
Carlos Polop 8161b74c38 Set social preview logo for cloud book 2026-03-12 00:52:01 +01:00
Carlos Polop dc3df85e47 Add automatic social and structured SEO tags 2026-03-12 00:19:09 +01:00
Carlos Polop 48514dbd94 Fix cloud searchindex retry working directory 2026-03-11 21:58:12 +01:00