 SirBroccoliandGitHub
|
901f745d5a
|
Merge pull request #309 from HackTricks-wiki/hermes/reduce-cloudfront-invalidation-paths
Reduce redundant CloudFront invalidation paths
|
2026-06-21 15:52:05 +02:00 |
|
|
SirBroccoliandGitHub
|
db20d27796
|
Merge pull request #310 from TheToddLuci0/azure_alert_phishing
azrte-TheToddLuci0
|
2026-06-21 15:51:41 +02:00 |
|
|
SirBroccoliandGitHub
|
6a99acfb6f
|
Merge pull request #306 from HackTricks-wiki/update_Hacking_Google_with_AI_AI-Assisted_Discovery-Doc_f250207268e52efb
Hacking Google with AI AI-Assisted Discovery-Document Fuzzin...
|
2026-06-16 15:37:49 +02:00 |
|
|
SirBroccoliandGitHub
|
a11e2ff62a
|
Merge pull request #304 from HackTricks-wiki/update_Ghost-Sender_-_Universal_Email_Spoofing_against__8fb2d618657690cb
Ghost-Sender - Universal Email Spoofing against Exchange Onl...
|
2026-06-16 15:26:37 +02:00 |
|
|
SirBroccoliandGitHub
|
7a707977b1
|
Merge pull request #308 from marcgoam/azrte-marcgoam
azrte-marcgoam
|
2026-06-16 15:20:23 +02:00 |
|
|
SirBroccoliandGitHub
|
d318847a36
|
Merge pull request #305 from Fudgedotdotdot/master
azrte-Fudgedotdotdot
|
2026-06-16 15:13:09 +02:00 |
|
|
SirBroccoliandGitHub
|
b81257def6
|
Merge pull request #301 from HackTricks-wiki/update_Poisoning_Claude_Code__One_GitHub_Issue_to_Break_t_20260602_103342
Poisoning Claude Code One GitHub Issue to Break the Supply C...
|
2026-06-05 16:11:29 +02:00 |
|
|
SirBroccoliandGitHub
|
680428f929
|
Merge pull request #299 from HackTricks-wiki/update_Authenticated_RCE_via_Argument_Injection_in_Gogs_R_20260528_154851
Authenticated RCE via Argument Injection in Gogs Rebase Merg...
|
2026-06-05 15:52:53 +02:00 |
|
|
SirBroccoliandGitHub
|
ab22b74079
|
Merge pull request #298 from cblopez/patch-1
Added access entry abuse to pivot from AWS to Kubernetes
|
2026-06-05 15:51:47 +02:00 |
|
|
SirBroccoliandGitHub
|
45e53868a6
|
Merge pull request #297 from HackTricks-wiki/update_Investigating_Suspicious_AI_Workflows_in_Microsoft_20260527_153712
Investigating Suspicious AI Workflows in Microsoft Entra Age...
|
2026-06-05 11:23:54 +02:00 |
|
|
SirBroccoliandGitHub
|
f509732e5d
|
Merge pull request #296 from JaimePolop/master
Fix table
|
2026-06-05 11:22:07 +02:00 |
|
|
Carlos Polop
|
8867d2f8c0
|
f
|
2026-06-05 10:40:57 +02:00 |
|
|
SirBroccoliandGitHub
|
ec2bf385fe
|
Merge pull request #302 from HackTricks-wiki/fix/hermes-root-sitemap-invalidation
ci: skip unchanged root sitemap invalidations
|
2026-06-04 23:56:41 +02:00 |
|
|
SirBroccoliandGitHub
|
2aea30dad8
|
Merge pull request #295 from HackTricks-wiki/teamcity-security-section
Add TeamCity CI/CD pentesting section
|
2026-05-26 21:32:53 +02:00 |
|
|
Carlos Polop
|
e9b5f23f8a
|
Add TeamCity CI/CD pentesting section
|
2026-05-26 21:31:37 +02:00 |
|
|
SirBroccoliandGitHub
|
23530050c5
|
Merge pull request #293 from HackTricks-wiki/update_Navigating_Lax_Load_Balancers__When_an_Intersectio_20260525_145126
Navigating Lax Load Balancers When an Intersection Gets You ...
|
2026-05-26 21:11:31 +02:00 |
|
|
SirBroccoliandGitHub
|
af48369ba7
|
Merge pull request #292 from HackTricks-wiki/update_Paved_With_Intent__ROADtools_and_Nation-State_Tact_20260522_143732
Paved With Intent ROADtools and Nation-State Tactics in the ...
|
2026-05-26 21:09:38 +02:00 |
|
|
SirBroccoliandGitHub
|
ae1056fe51
|
Merge pull request #290 from HackTricks-wiki/update_Mini_Shai-Hulud__FAQ_on_the_TeamPCP_npm_and_PyPI_s_20260521_195353
Mini Shai-Hulud FAQ on the TeamPCP npm and PyPI supply-chain...
|
2026-05-26 21:04:47 +02:00 |
|
|
SirBroccoliandGitHub
|
b4424204e9
|
Update README.md
|
2026-05-26 21:04:31 +02:00 |
|
|
SirBroccoliandGitHub
|
5400f7c96a
|
Merge pull request #288 from HackTricks-wiki/chore/drop-redundant-robots-invalidation-20260519
Avoid redundant robots CloudFront invalidations
|
2026-05-26 21:00:53 +02:00 |
|
|
SirBroccoliandGitHub
|
2439b0354b
|
Merge pull request #294 from Jacob-Ham/aws-fix-iam-mfa
Fixed some IAM MFA device priv esc issues.
|
2026-05-26 20:06:25 +02:00 |
|
|
Carlos Polop
|
06a089227c
|
f
|
2026-05-26 17:55:54 +02:00 |
|
|
Carlos Polop
|
8cb43f6b52
|
Keep sponsor title visible on hover
|
2026-05-18 21:36:03 +02:00 |
|
|
Carlos Polop
|
4345b0e6bb
|
Refine sponsor hover and update CTA styling
|
2026-05-18 21:10:45 +02:00 |
|
|
Carlos Polop
|
c1bd048854
|
Add page update request nav link
|
2026-05-18 21:03:00 +02:00 |
|
|
Carlos Polop
|
caf7c4bcfd
|
Improve sponsor ad hover layout
|
2026-05-18 20:51:59 +02:00 |
|
|
SirBroccoliandGitHub
|
72f0f71ef5
|
Merge pull request #287 from JaimePolop/master
a
|
2026-05-18 17:32:37 +02:00 |
|
|
Carlos Polop
|
e839fdd130
|
f
|
2026-05-11 16:51:50 +02:00 |
|
|
Carlos Polop
|
b7832d4f82
|
Increase sponsor hover CTA text size
|
2026-05-09 21:49:49 +02:00 |
|
|
Carlos Polop
|
4244ebd156
|
Increase sponsor hover CTA prominence
|
2026-05-09 21:26:35 +02:00 |
|
|
Carlos Polop
|
a80a62503c
|
Tune sponsor hover text and CTA size
|
2026-05-09 21:01:46 +02:00 |
|
|
Carlos Polop
|
2afd0745f7
|
Prevent sponsor text CTA overlap
|
2026-05-09 20:36:22 +02:00 |
|
|
Carlos Polop
|
4efde9fabe
|
Fix sponsor hover text placement
|
2026-05-09 19:02:23 +02:00 |
|
|
Carlos Polop
|
7759eb35db
|
Improve sponsor hover layout
|
2026-05-09 18:50:44 +02:00 |
|
|
Carlos Polop
|
39db3878cf
|
Improve SEO metadata and translation discovery
|
2026-05-09 17:34:28 +02:00 |
|
|
SirBroccoliandGitHub
|
d13c270d7f
|
Merge pull request #286 from JaimePolop/master
Add WireServer & GoalState
|
2026-05-05 18:18:44 +02:00 |
|
|
Carlos Polop
|
2fe01e873a
|
Mention WireServer MI selector fallback
|
2026-05-05 17:50:24 +02:00 |
|
|
Carlos Polop
|
2a4cc7c428
|
Document Azure MI token discovery limits
|
2026-05-05 17:45:43 +02:00 |
|
|
Carlos Polop
|
406b2549aa
|
Replace brittle managed identity enumeration examples
|
2026-05-05 16:27:01 +02:00 |
|
|
Carlos Polop
|
393c6997b1
|
Clarify Azure WireServer access contexts
|
2026-05-05 16:16:00 +02:00 |
|
|
SirBroccoliandGitHub
|
2f2df45366
|
Update README.md
|
2026-05-05 15:31:53 +02:00 |
|
|
SirBroccoliandGitHub
|
28a5f23cd9
|
Merge pull request #279 from HackTricks-wiki/update_IAM_the_Captain_Now___Hijacking_Azure_Identity_Acc_20260409_132358
IAM the Captain Now – Hijacking Azure Identity Access
|
2026-05-05 15:17:16 +02:00 |
|
|
SirBroccoliandGitHub
|
a80e28427b
|
Merge pull request #285 from ZoneMix/master
Update User Password Addition
|
2026-05-03 10:45:20 +02:00 |
|
|
SirBroccoliandGitHub
|
7f789f1bc1
|
Merge pull request #284 from 0x1347/arte-veue
arte-veue
|
2026-05-03 10:44:53 +02:00 |
|
|
Carlos Polop
|
95ec89cc7b
|
f
|
2026-05-01 00:29:47 +02:00 |
|
|
Carlos Polop
|
6447449ade
|
Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud
|
2026-04-30 21:29:49 +02:00 |
|
|
Carlos Polop
|
bc899d4b0b
|
f
|
2026-04-30 21:29:35 +02:00 |
|
|
SirBroccoliandGitHub
|
c27dd45393
|
Merge pull request #283 from HackTricks-wiki/update_The_npm_Threat_Landscape__Attack_Surface_and_Mitig_20260425_021054
The npm Threat Landscape Attack Surface and Mitigations
|
2026-04-28 01:25:02 +02:00 |
|
|
SirBroccoliandGitHub
|
627ae260b8
|
Merge pull request #277 from HackTricks-wiki/update_Cracks_in_the_Bedrock__Escaping_the_AWS_AgentCore__20260408_020957
Cracks in the Bedrock Escaping the AWS AgentCore Sandbox
|
2026-04-28 01:23:06 +02:00 |
|
|
SirBroccoliandGitHub
|
979375b432
|
Merge pull request #280 from Local-Guy-123/local-guy-ssm-update-doc-privesc-persist
arte-Hex-Editor
|
2026-04-21 10:19:44 +02:00 |
|
|
SirBroccoliandGitHub
|
c7d8d96af8
|
Merge pull request #281 from jFriedli/arte-jfriedli-aws-bedrock-lambda-privesc
AWS Bedrock: Add Lambda Tool Hijacking Privilege Escalation (Agent Action Groups)
|
2026-04-21 10:18:55 +02:00 |
|
|
Carlos Polop
|
913bcb0f09
|
f
|
2026-04-19 12:54:23 +02:00 |
|
|
Carlos Polop
|
889c2aab05
|
f
|
2026-04-13 20:01:42 +02:00 |
|
|
Carlos Polop
|
05c82f4398
|
Restore 4/5 BSA, 1/5 legacy ad split
|
2026-04-08 19:06:44 +02:00 |
|
|
Carlos Polop
|
28ce890dde
|
Temp: BSA ads 5/5 times for verification
|
2026-04-08 16:51:11 +02:00 |
|
|
SirBroccoliandGitHub
|
36d8f39a65
|
Merge pull request #274 from HackTricks-wiki/update_When_an_Attacker_Meets_a_Group_of_Agents__Navigati_20260404_020203
When an Attacker Meets a Group of Agents Navigating Amazon B...
|
2026-04-07 17:20:05 +02:00 |
|
|
Carlos Polop
|
57bd71e076
|
f
|
2026-04-07 15:45:46 +02:00 |
|
|
SirBroccoliandGitHub
|
10e13b14bd
|
Merge pull request #276 from HackTricks-wiki/pr-271
Expand GitHub Actions cache poisoning docs with Angular 2026 + Cacheract demo
|
2026-04-07 14:59:12 +02:00 |
|
|
Carlos Polop
|
d5a2d0c59a
|
f
|
2026-04-07 14:57:48 +02:00 |
|
|
SirBroccoliandGitHub
|
cccacb7ee1
|
Merge pull request #271 from HackTricks-wiki/update_Double_Agents__Exposing_Security_Blind_Spots_in_GC_20260331_131528
Double Agents Exposing Security Blind Spots in GCP Vertex AI
|
2026-04-07 14:27:51 +02:00 |
|
|
Carlos Polop
|
6b2c22a0f3
|
Normalize Vertex AI docs to enum/privesc/post-exploitation structure
|
2026-04-07 14:24:55 +02:00 |
|
|
SirBroccoliandGitHub
|
941e8d69e6
|
Merge pull request #272 from HackTricks-wiki/update_Weaponizing_the_Protectors__TeamPCP_s_Multi-Stage__20260401_021730
Weaponizing the Protectors TeamPCP’s Multi-Stage Supply Chai...
|
2026-04-07 14:24:20 +02:00 |
|
|
SirBroccoliandGitHub
|
55277879e8
|
Merge pull request #273 from thomaspreece/master
Add new CodeBuild credential leakage technique
|
2026-04-01 14:33:12 +02:00 |
|
|
SirBroccoliandGitHub
|
06110601f6
|
Merge pull request #269 from HackTricks-wiki/update_Full_Disclosure__A_Third__and_Fourth__Azure_Sign-I_20260319_185745
Full Disclosure A Third (and Fourth) Azure Sign-In Log Bypas...
|
2026-03-31 18:46:42 +02:00 |
|
|
SirBroccoliandGitHub
|
0172f076fc
|
Merge pull request #270 from thug-gamer/patch-1
fix saml_forge.py script; fix typo
|
2026-03-31 18:36:55 +02:00 |
|
|
Carlos Polop
|
31812d3f9d
|
f
|
2026-03-17 21:13:33 +01:00 |
|
|
Carlos Polop
|
9cee22441f
|
f
|
2026-03-17 20:07:35 +01:00 |
|
|
SirBroccoliandGitHub
|
126ea6644d
|
Merge pull request #266 from HackTricks-wiki/update_How_to_detect_and_respond_to_OAuth_consent_attacks_20260304_184649
How to detect and respond to OAuth consent attacks in Google...
|
2026-03-17 19:42:55 +01:00 |
|
|
SirBroccoliandGitHub
|
2bd82aa2a5
|
Merge pull request #267 from bka-dev/master
Update README.md
|
2026-03-17 19:42:23 +01:00 |
|
|
Carlos Polop
|
8161b74c38
|
Set social preview logo for cloud book
|
2026-03-12 00:52:01 +01:00 |
|
|
Carlos Polop
|
dc3df85e47
|
Add automatic social and structured SEO tags
|
2026-03-12 00:19:09 +01:00 |
|
|
Carlos Polop
|
48514dbd94
|
Fix cloud searchindex retry working directory
|
2026-03-11 21:58:12 +01:00 |
|
|
Carlos Polop
|
67584e84e5
|
Trigger deploys for workflow and SEO script changes
|
2026-03-11 21:35:32 +01:00 |
|
|
Carlos Polop
|
234bd83229
|
Invalidate SEO deploys and fix translation script path
|
2026-03-11 21:34:12 +01:00 |
|
|
Carlos Polop
|
6a9b95fe96
|
Add SEO post-processing for cloud wiki
|
2026-03-11 21:25:52 +01:00 |
|
|
Carlos Polop
|
40b954c021
|
f
|
2026-03-09 16:08:21 +01:00 |
|
|
Carlos Polop
|
9e39e77d6e
|
f
|
2026-03-04 12:21:21 +01:00 |
|
|
Carlos Polop
|
53d29a8805
|
Merge branch 'add-ad-entra-pivot-techniques' into master
|
2026-03-03 18:55:26 +01:00 |
|
|
Carlos Polop
|
36ea0d12e4
|
f
|
2026-03-03 18:53:49 +01:00 |
|
|
SirBroccoliandGitHub
|
99f3c09476
|
Merge pull request #264 from HackTricks-wiki/update_ChatGPT_in_your_inbox__Investigating_Entra_apps_th_20260224_144948
ChatGPT in your inbox? Investigating Entra apps that request...
|
2026-03-03 16:32:28 +01:00 |
|
|
SirBroccoliandGitHub
|
92afcc419d
|
Update SUMMARY.md
|
2026-03-03 16:32:15 +01:00 |
|
|
SirBroccoliandGitHub
|
889e0a9a69
|
Merge pull request #265 from HackTricks-wiki/add-ad-entra-pivot-techniques
Add AD-to-Entra pivot techniques (Connect Sync policy abuse, Exchange Hybrid)
|
2026-03-03 00:50:42 +01:00 |
|
|
Carlos Polop
|
8148555ca5
|
Remove outdated Connect Sync Policy Abuse technique
|
2026-03-03 00:49:59 +01:00 |
|
|
Carlos Polop
|
9bb45f07b4
|
Refine hybrid pivot docs with current exploitability status
|
2026-03-03 00:30:14 +01:00 |
|
|
Carlos Polop
|
9ebb2d956e
|
f
|
2026-03-01 21:18:03 +01:00 |
|
|
Carlos Polop
|
d847f32cc5
|
f
|
2026-03-01 20:50:31 +01:00 |
|
|
Carlos Polop
|
0e45e2e2c7
|
Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud
|
2026-02-27 15:07:10 +01:00 |
|
|
Carlos Polop
|
d95f15f03e
|
f
|
2026-02-27 15:07:09 +01:00 |
|
|
SirBroccoliandGitHub
|
84c9455995
|
Merge pull request #263 from Marmeus/master
Fixed typos
|
2026-02-24 00:52:53 +01:00 |
|
|
Carlos Polop
|
202d0fe86c
|
f robots
|
2026-02-23 11:53:26 +01:00 |
|
|
SirBroccoliandGitHub
|
69927889f1
|
Merge pull request #262 from HackTricks-wiki/fix/robots-txt-upload
Upload robots.txt to S3 root
|
2026-02-23 11:45:57 +01:00 |
|
|
SirBroccoliandGitHub
|
25552f6898
|
Merge pull request #260 from Marmeus/patch-1
Add command for EC2 console screenshot retrieval
|
2026-02-23 11:13:53 +01:00 |
|
|
SirBroccoliandGitHub
|
26d996b789
|
Merge pull request #261 from JaimePolop/master
Changes Update SAML
|
2026-02-23 11:13:23 +01:00 |
|
|
SirBroccoliandGitHub
|
1685887efa
|
Merge pull request #259 from Tamirye/dataflowrider
grte-ye-ti
|
2026-02-16 12:06:38 +01:00 |
|
|
Carlos Polop
|
cd9939def6
|
f
|
2026-02-16 12:04:08 +01:00 |
|
|
Carlos Polop
|
fd262d744f
|
f
|
2026-02-16 11:02:25 +01:00 |
|
|
Carlos Polop
|
0c445121d5
|
f
|
2026-02-15 22:17:38 +01:00 |
|
|
Carlos Polop
|
3724e2729a
|
f
|
2026-02-14 20:47:09 +01:00 |
|
|
Carlos Polop
|
616d1255a8
|
f
|
2026-02-14 17:54:58 +01:00 |
|
|
Carlos Polop
|
1829b6f80d
|
f
|
2026-02-14 17:54:48 +01:00 |
|