|
38e26664a3
|
Add content from: Pandora's Container Part 1: Unpacking Azure Container Securi... (#322)
Co-authored-by: HackTricks News Bot <bot@hacktricks.xyz>
|
2026-07-19 11:18:14 +02:00 |
|
|
|
7e5ea5c1f8
|
ci: avoid redundant S3 uploads (#326)
Co-authored-by: Hermes Agent <hermes-agent@users.noreply.github.com>
|
2026-07-19 11:16:14 +02:00 |
|
|
|
a2c70780d3
|
Fix translator directive corruption and add Docker Compose (#325)
Co-authored-by: Hermes <hermes@users.noreply.github.com>
|
2026-07-19 00:24:24 +02:00 |
|
|
SirBroccoliandGitHub
|
ffeb93ee6b
|
Merge pull request #324 from HackTricks-wiki/agent/update-linux-cert-artwork
Update Linux certification artwork
|
2026-07-17 15:58:23 +02:00 |
|
|
Carlos Polop
|
7e896debe5
|
Update Linux certification artwork
|
2026-07-17 14:16:40 +02:00 |
|
|
Carlos Polop
|
a24b3e2fc3
|
Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud
|
2026-07-17 08:06:43 +02:00 |
|
|
Carlos Polop
|
6caceba32f
|
f
|
2026-07-17 08:06:40 +02:00 |
|
|
SirBroccoliandGitHub
|
361183c9ae
|
Merge pull request #321 from Iceman3900/patch-1
Update Azure SQL Server Network Access Details
|
2026-07-13 16:04:49 +02:00 |
|
|
SirBroccoliandGitHub
|
396c6dd189
|
Merge pull request #320 from JaimePolop/master
Update Azure Storage SFTP RBAC support
|
2026-07-09 18:55:15 +02:00 |
|
|
Carlos Polop
|
5c1a25db1d
|
f
|
2026-07-09 12:45:26 +02:00 |
|
|
Carlos Polop
|
b295855824
|
f
|
2026-07-09 11:11:50 +02:00 |
|
|
Carlos PolopandClaude Opus 4.8
|
b055d05cef
|
Add Discord and Telegram links to footer/menu socials
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-08 20:03:43 +02:00 |
|
|
SirBroccoliandGitHub
|
8ed59d5760
|
Merge pull request #319 from HackTricks-wiki/update_Caught_in_the_Octopus_Trap_Unauthenticated_RCE_i_7e1b915b024944ba
Caught in the Octopus Trap Unauthenticated RCE in Argo CD wi...
|
2026-07-06 17:52:00 +02:00 |
|
|
SirBroccoliandGitHub
|
6657d67454
|
Merge pull request #318 from HackTricks-wiki/update_Find_Comment_Get_Shell_Command_Injection_in_dbt__4f2a061f6bbf07ee
Find Comment, Get Shell Command Injection in dbt’s GitHub Ac...
|
2026-07-06 17:24:26 +02:00 |
|
|
SirBroccoliandGitHub
|
e405713d17
|
Merge pull request #317 from HackTricks-wiki/update_Charting_your_way_in_Helm_template_injection_c4c3d85e188cf37f
Charting your way in Helm template injection
|
2026-07-06 17:23:40 +02:00 |
|
|
SirBroccoliandGitHub
|
12c5862052
|
Merge branch 'master' into update_Charting_your_way_in_Helm_template_injection_c4c3d85e188cf37f
|
2026-07-06 17:23:33 +02:00 |
|
|
Carlos Polop
|
7c46190697
|
Add summer discount popup
|
2026-07-06 14:57:14 +02:00 |
|
|
Carlos Polop
|
30f0e6f3e3
|
Fix chapter navigation links
|
2026-07-05 16:55:32 +02:00 |
|
|
Carlos Polop
|
e1ed994783
|
Fix vertical sponsor ad overflow
|
2026-07-05 02:06:30 +02:00 |
|
|
Carlos Polop
|
58413bbe99
|
Update sponsor card styling
|
2026-07-04 20:53:44 +02:00 |
|
|
Carlos Polop
|
339eaf5aba
|
changes
|
2026-07-04 13:36:42 +02:00 |
|
|
Carlos Polop
|
c4d28b9207
|
Support absolute sponsor image URLs
|
2026-07-04 13:35:45 +02:00 |
|
|
Carlos Polop
|
fdd3d95668
|
Add local cloud Kubernetes updates
|
2026-07-04 00:45:00 +02:00 |
|
|
Carlos Polop
|
42c3a88de7
|
Improve sponsor ad hover layout
|
2026-07-03 23:05:07 +02:00 |
|
|
SirBroccoliandGitHub
|
36c997b8f0
|
Merge pull request #316 from OffsecPierogi/master
azrte-MahonIsland
|
2026-06-26 10:15:37 +02:00 |
|
|
SirBroccoliandGitHub
|
5490c138ba
|
Merge pull request #312 from HackTricks-wiki/update_What_the_Miasma_Campaign_Reveals_About_the_New_S_9de20d9245b07fa3
What the Miasma Campaign Reveals About the New Supply Chain ...
|
2026-06-25 18:06:10 +02:00 |
|
|
Carlos Polop
|
1b27af5f46
|
Move Miasma npm abuse into dedicated page
|
2026-06-25 18:00:45 +02:00 |
|
|
SirBroccoliandGitHub
|
4bb7f5d2d7
|
Merge pull request #311 from HackTricks-wiki/update_The_Global_Namespace_Risk_Universal_Bucket_Hijac_541fed5c68a1451e
The Global Namespace Risk Universal Bucket Hijacking Techniq...
|
2026-06-25 17:56:15 +02:00 |
|
|
Carlos Polop
|
356e26a346
|
Move bucket hijacking technique to service pages
|
2026-06-25 17:54:40 +02:00 |
|
|
SirBroccoliandGitHub
|
42e19b55ad
|
Merge pull request #315 from HackTricks-wiki/refine-hovered-sponsor-layout-20260624173941
Refine hovered sponsor layout
|
2026-06-24 17:57:50 +02:00 |
|
|
Carlos Polop
|
da81c92add
|
Adjust sponsor ad layout
|
2026-06-24 17:56:26 +02:00 |
|
|
SirBroccoliandGitHub
|
8e4b5d5693
|
Merge pull request #314 from HackTricks-wiki/fix-sponsor-title-visibility-20260624171228
Fix sponsor title visibility
|
2026-06-24 17:24:42 +02:00 |
|
|
SirBroccoliandGitHub
|
221643d353
|
Merge pull request #313 from HackTricks-wiki/add-linux-course-sponsor-images-20260624163124
Add Linux course sponsor images
|
2026-06-24 16:33:57 +02:00 |
|
|
SirBroccoliandGitHub
|
901f745d5a
|
Merge pull request #309 from HackTricks-wiki/hermes/reduce-cloudfront-invalidation-paths
Reduce redundant CloudFront invalidation paths
|
2026-06-21 15:52:05 +02:00 |
|
|
SirBroccoliandGitHub
|
db20d27796
|
Merge pull request #310 from TheToddLuci0/azure_alert_phishing
azrte-TheToddLuci0
|
2026-06-21 15:51:41 +02:00 |
|
|
SirBroccoliandGitHub
|
6a99acfb6f
|
Merge pull request #306 from HackTricks-wiki/update_Hacking_Google_with_AI_AI-Assisted_Discovery-Doc_f250207268e52efb
Hacking Google with AI AI-Assisted Discovery-Document Fuzzin...
|
2026-06-16 15:37:49 +02:00 |
|
|
SirBroccoliandGitHub
|
a11e2ff62a
|
Merge pull request #304 from HackTricks-wiki/update_Ghost-Sender_-_Universal_Email_Spoofing_against__8fb2d618657690cb
Ghost-Sender - Universal Email Spoofing against Exchange Onl...
|
2026-06-16 15:26:37 +02:00 |
|
|
SirBroccoliandGitHub
|
7a707977b1
|
Merge pull request #308 from marcgoam/azrte-marcgoam
azrte-marcgoam
|
2026-06-16 15:20:23 +02:00 |
|
|
SirBroccoliandGitHub
|
d318847a36
|
Merge pull request #305 from Fudgedotdotdot/master
azrte-Fudgedotdotdot
|
2026-06-16 15:13:09 +02:00 |
|
|
SirBroccoliandGitHub
|
b81257def6
|
Merge pull request #301 from HackTricks-wiki/update_Poisoning_Claude_Code__One_GitHub_Issue_to_Break_t_20260602_103342
Poisoning Claude Code One GitHub Issue to Break the Supply C...
|
2026-06-05 16:11:29 +02:00 |
|
|
SirBroccoliandGitHub
|
680428f929
|
Merge pull request #299 from HackTricks-wiki/update_Authenticated_RCE_via_Argument_Injection_in_Gogs_R_20260528_154851
Authenticated RCE via Argument Injection in Gogs Rebase Merg...
|
2026-06-05 15:52:53 +02:00 |
|
|
SirBroccoliandGitHub
|
ab22b74079
|
Merge pull request #298 from cblopez/patch-1
Added access entry abuse to pivot from AWS to Kubernetes
|
2026-06-05 15:51:47 +02:00 |
|
|
SirBroccoliandGitHub
|
45e53868a6
|
Merge pull request #297 from HackTricks-wiki/update_Investigating_Suspicious_AI_Workflows_in_Microsoft_20260527_153712
Investigating Suspicious AI Workflows in Microsoft Entra Age...
|
2026-06-05 11:23:54 +02:00 |
|
|
SirBroccoliandGitHub
|
f509732e5d
|
Merge pull request #296 from JaimePolop/master
Fix table
|
2026-06-05 11:22:07 +02:00 |
|
|
Carlos Polop
|
8867d2f8c0
|
f
|
2026-06-05 10:40:57 +02:00 |
|
|
SirBroccoliandGitHub
|
ec2bf385fe
|
Merge pull request #302 from HackTricks-wiki/fix/hermes-root-sitemap-invalidation
ci: skip unchanged root sitemap invalidations
|
2026-06-04 23:56:41 +02:00 |
|
|
SirBroccoliandGitHub
|
2aea30dad8
|
Merge pull request #295 from HackTricks-wiki/teamcity-security-section
Add TeamCity CI/CD pentesting section
|
2026-05-26 21:32:53 +02:00 |
|
|
Carlos Polop
|
e9b5f23f8a
|
Add TeamCity CI/CD pentesting section
|
2026-05-26 21:31:37 +02:00 |
|
|
SirBroccoliandGitHub
|
23530050c5
|
Merge pull request #293 from HackTricks-wiki/update_Navigating_Lax_Load_Balancers__When_an_Intersectio_20260525_145126
Navigating Lax Load Balancers When an Intersection Gets You ...
|
2026-05-26 21:11:31 +02:00 |
|
|
SirBroccoliandGitHub
|
af48369ba7
|
Merge pull request #292 from HackTricks-wiki/update_Paved_With_Intent__ROADtools_and_Nation-State_Tact_20260522_143732
Paved With Intent ROADtools and Nation-State Tactics in the ...
|
2026-05-26 21:09:38 +02:00 |
|
|
SirBroccoliandGitHub
|
ae1056fe51
|
Merge pull request #290 from HackTricks-wiki/update_Mini_Shai-Hulud__FAQ_on_the_TeamPCP_npm_and_PyPI_s_20260521_195353
Mini Shai-Hulud FAQ on the TeamPCP npm and PyPI supply-chain...
|
2026-05-26 21:04:47 +02:00 |
|
|
SirBroccoliandGitHub
|
b4424204e9
|
Update README.md
|
2026-05-26 21:04:31 +02:00 |
|
|
SirBroccoliandGitHub
|
5400f7c96a
|
Merge pull request #288 from HackTricks-wiki/chore/drop-redundant-robots-invalidation-20260519
Avoid redundant robots CloudFront invalidations
|
2026-05-26 21:00:53 +02:00 |
|
|
SirBroccoliandGitHub
|
2439b0354b
|
Merge pull request #294 from Jacob-Ham/aws-fix-iam-mfa
Fixed some IAM MFA device priv esc issues.
|
2026-05-26 20:06:25 +02:00 |
|
|
Carlos Polop
|
06a089227c
|
f
|
2026-05-26 17:55:54 +02:00 |
|
|
Carlos Polop
|
8cb43f6b52
|
Keep sponsor title visible on hover
|
2026-05-18 21:36:03 +02:00 |
|
|
Carlos Polop
|
4345b0e6bb
|
Refine sponsor hover and update CTA styling
|
2026-05-18 21:10:45 +02:00 |
|
|
Carlos Polop
|
c1bd048854
|
Add page update request nav link
|
2026-05-18 21:03:00 +02:00 |
|
|
Carlos Polop
|
caf7c4bcfd
|
Improve sponsor ad hover layout
|
2026-05-18 20:51:59 +02:00 |
|
|
SirBroccoliandGitHub
|
72f0f71ef5
|
Merge pull request #287 from JaimePolop/master
a
|
2026-05-18 17:32:37 +02:00 |
|
|
Carlos Polop
|
e839fdd130
|
f
|
2026-05-11 16:51:50 +02:00 |
|
|
Carlos Polop
|
b7832d4f82
|
Increase sponsor hover CTA text size
|
2026-05-09 21:49:49 +02:00 |
|
|
Carlos Polop
|
4244ebd156
|
Increase sponsor hover CTA prominence
|
2026-05-09 21:26:35 +02:00 |
|
|
Carlos Polop
|
a80a62503c
|
Tune sponsor hover text and CTA size
|
2026-05-09 21:01:46 +02:00 |
|
|
Carlos Polop
|
2afd0745f7
|
Prevent sponsor text CTA overlap
|
2026-05-09 20:36:22 +02:00 |
|
|
Carlos Polop
|
4efde9fabe
|
Fix sponsor hover text placement
|
2026-05-09 19:02:23 +02:00 |
|
|
Carlos Polop
|
7759eb35db
|
Improve sponsor hover layout
|
2026-05-09 18:50:44 +02:00 |
|
|
Carlos Polop
|
39db3878cf
|
Improve SEO metadata and translation discovery
|
2026-05-09 17:34:28 +02:00 |
|
|
SirBroccoliandGitHub
|
d13c270d7f
|
Merge pull request #286 from JaimePolop/master
Add WireServer & GoalState
|
2026-05-05 18:18:44 +02:00 |
|
|
Carlos Polop
|
2fe01e873a
|
Mention WireServer MI selector fallback
|
2026-05-05 17:50:24 +02:00 |
|
|
Carlos Polop
|
2a4cc7c428
|
Document Azure MI token discovery limits
|
2026-05-05 17:45:43 +02:00 |
|
|
Carlos Polop
|
406b2549aa
|
Replace brittle managed identity enumeration examples
|
2026-05-05 16:27:01 +02:00 |
|
|
Carlos Polop
|
393c6997b1
|
Clarify Azure WireServer access contexts
|
2026-05-05 16:16:00 +02:00 |
|
|
SirBroccoliandGitHub
|
2f2df45366
|
Update README.md
|
2026-05-05 15:31:53 +02:00 |
|
|
SirBroccoliandGitHub
|
28a5f23cd9
|
Merge pull request #279 from HackTricks-wiki/update_IAM_the_Captain_Now___Hijacking_Azure_Identity_Acc_20260409_132358
IAM the Captain Now – Hijacking Azure Identity Access
|
2026-05-05 15:17:16 +02:00 |
|
|
SirBroccoliandGitHub
|
a80e28427b
|
Merge pull request #285 from ZoneMix/master
Update User Password Addition
|
2026-05-03 10:45:20 +02:00 |
|
|
SirBroccoliandGitHub
|
7f789f1bc1
|
Merge pull request #284 from 0x1347/arte-veue
arte-veue
|
2026-05-03 10:44:53 +02:00 |
|
|
Carlos Polop
|
95ec89cc7b
|
f
|
2026-05-01 00:29:47 +02:00 |
|
|
Carlos Polop
|
6447449ade
|
Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud
|
2026-04-30 21:29:49 +02:00 |
|
|
Carlos Polop
|
bc899d4b0b
|
f
|
2026-04-30 21:29:35 +02:00 |
|
|
SirBroccoliandGitHub
|
c27dd45393
|
Merge pull request #283 from HackTricks-wiki/update_The_npm_Threat_Landscape__Attack_Surface_and_Mitig_20260425_021054
The npm Threat Landscape Attack Surface and Mitigations
|
2026-04-28 01:25:02 +02:00 |
|
|
SirBroccoliandGitHub
|
627ae260b8
|
Merge pull request #277 from HackTricks-wiki/update_Cracks_in_the_Bedrock__Escaping_the_AWS_AgentCore__20260408_020957
Cracks in the Bedrock Escaping the AWS AgentCore Sandbox
|
2026-04-28 01:23:06 +02:00 |
|
|
SirBroccoliandGitHub
|
979375b432
|
Merge pull request #280 from Local-Guy-123/local-guy-ssm-update-doc-privesc-persist
arte-Hex-Editor
|
2026-04-21 10:19:44 +02:00 |
|
|
SirBroccoliandGitHub
|
c7d8d96af8
|
Merge pull request #281 from jFriedli/arte-jfriedli-aws-bedrock-lambda-privesc
AWS Bedrock: Add Lambda Tool Hijacking Privilege Escalation (Agent Action Groups)
|
2026-04-21 10:18:55 +02:00 |
|
|
Carlos Polop
|
913bcb0f09
|
f
|
2026-04-19 12:54:23 +02:00 |
|
|
Carlos Polop
|
889c2aab05
|
f
|
2026-04-13 20:01:42 +02:00 |
|
|
Carlos Polop
|
05c82f4398
|
Restore 4/5 BSA, 1/5 legacy ad split
|
2026-04-08 19:06:44 +02:00 |
|
|
Carlos Polop
|
28ce890dde
|
Temp: BSA ads 5/5 times for verification
|
2026-04-08 16:51:11 +02:00 |
|
|
SirBroccoliandGitHub
|
36d8f39a65
|
Merge pull request #274 from HackTricks-wiki/update_When_an_Attacker_Meets_a_Group_of_Agents__Navigati_20260404_020203
When an Attacker Meets a Group of Agents Navigating Amazon B...
|
2026-04-07 17:20:05 +02:00 |
|
|
Carlos Polop
|
57bd71e076
|
f
|
2026-04-07 15:45:46 +02:00 |
|
|
SirBroccoliandGitHub
|
10e13b14bd
|
Merge pull request #276 from HackTricks-wiki/pr-271
Expand GitHub Actions cache poisoning docs with Angular 2026 + Cacheract demo
|
2026-04-07 14:59:12 +02:00 |
|
|
Carlos Polop
|
d5a2d0c59a
|
f
|
2026-04-07 14:57:48 +02:00 |
|
|
SirBroccoliandGitHub
|
cccacb7ee1
|
Merge pull request #271 from HackTricks-wiki/update_Double_Agents__Exposing_Security_Blind_Spots_in_GC_20260331_131528
Double Agents Exposing Security Blind Spots in GCP Vertex AI
|
2026-04-07 14:27:51 +02:00 |
|
|
Carlos Polop
|
6b2c22a0f3
|
Normalize Vertex AI docs to enum/privesc/post-exploitation structure
|
2026-04-07 14:24:55 +02:00 |
|
|
SirBroccoliandGitHub
|
941e8d69e6
|
Merge pull request #272 from HackTricks-wiki/update_Weaponizing_the_Protectors__TeamPCP_s_Multi-Stage__20260401_021730
Weaponizing the Protectors TeamPCP’s Multi-Stage Supply Chai...
|
2026-04-07 14:24:20 +02:00 |
|
|
SirBroccoliandGitHub
|
55277879e8
|
Merge pull request #273 from thomaspreece/master
Add new CodeBuild credential leakage technique
|
2026-04-01 14:33:12 +02:00 |
|
|
SirBroccoliandGitHub
|
06110601f6
|
Merge pull request #269 from HackTricks-wiki/update_Full_Disclosure__A_Third__and_Fourth__Azure_Sign-I_20260319_185745
Full Disclosure A Third (and Fourth) Azure Sign-In Log Bypas...
|
2026-03-31 18:46:42 +02:00 |
|
|
SirBroccoliandGitHub
|
0172f076fc
|
Merge pull request #270 from thug-gamer/patch-1
fix saml_forge.py script; fix typo
|
2026-03-31 18:36:55 +02:00 |
|
|
Carlos Polop
|
31812d3f9d
|
f
|
2026-03-17 21:13:33 +01:00 |
|
|
Carlos Polop
|
9cee22441f
|
f
|
2026-03-17 20:07:35 +01:00 |
|