Commit Graph

912 Commits

Author SHA1 Message Date
SirBroccoli
889e0a9a69 Merge pull request #265 from HackTricks-wiki/add-ad-entra-pivot-techniques
Add AD-to-Entra pivot techniques (Connect Sync policy abuse, Exchange Hybrid)
2026-03-03 00:50:42 +01:00
Carlos Polop
8148555ca5 Remove outdated Connect Sync Policy Abuse technique 2026-03-03 00:49:59 +01:00
Carlos Polop
9bb45f07b4 Refine hybrid pivot docs with current exploitability status 2026-03-03 00:30:14 +01:00
chack
9c61bb2811 Add technical details for AD-to-Entra pivot techniques 2026-03-02 23:24:08 +00:00
chack
93c2d43192 Add AD to Entra pivot techniques from recent talk 2026-03-02 23:03:22 +00:00
Carlos Polop
9ebb2d956e f 2026-03-01 21:18:03 +01:00
Carlos Polop
d847f32cc5 f 2026-03-01 20:50:31 +01:00
Carlos Polop
0e45e2e2c7 Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud 2026-02-27 15:07:10 +01:00
Carlos Polop
d95f15f03e f 2026-02-27 15:07:09 +01:00
SirBroccoli
84c9455995 Merge pull request #263 from Marmeus/master
Fixed typos
2026-02-24 00:52:53 +01:00
Marmeus
17397a0144 Fixed typos 2026-02-23 13:52:13 -05:00
Carlos Polop
202d0fe86c f robots 2026-02-23 11:53:26 +01:00
SirBroccoli
69927889f1 Merge pull request #262 from HackTricks-wiki/fix/robots-txt-upload
Upload robots.txt to S3 root
2026-02-23 11:45:57 +01:00
chack
5482d3d651 Upload robots.txt to S3 root 2026-02-23 10:38:26 +00:00
SirBroccoli
25552f6898 Merge pull request #260 from Marmeus/patch-1
Add command for EC2 console screenshot retrieval
2026-02-23 11:13:53 +01:00
SirBroccoli
26d996b789 Merge pull request #261 from JaimePolop/master
Changes Update SAML
2026-02-23 11:13:23 +01:00
Jaime Polop
a05e50758b Update gcp-storage-privesc.md 2026-02-23 11:11:37 +01:00
Jaime Polop
0cfe8fc87d Update README.md 2026-02-20 16:28:54 +01:00
Jaime Polop
633b608c29 Update README.md 2026-02-20 14:12:21 +01:00
Jaime Polop
005ab23773 Update README for IAM privilege escalation example 2026-02-20 14:10:28 +01:00
Marmeus
c35f2ca89b Add command for EC2 console screenshot retrieval
Added command to retrieve a JPG-format screenshot of a running instance.
2026-02-19 01:07:16 +00:00
SirBroccoli
1685887efa Merge pull request #259 from Tamirye/dataflowrider
grte-ye-ti
2026-02-16 12:06:38 +01:00
Carlos Polop
cd9939def6 f 2026-02-16 12:04:08 +01:00
Carlos Polop
fd262d744f f 2026-02-16 11:02:25 +01:00
Carlos Polop
0c445121d5 f 2026-02-15 22:17:38 +01:00
Tamir Yehuda
936fbc4285 added new GCP Dataflow exploitation, privilege escalation, and enumeration sections 2026-02-15 21:34:08 +02:00
Carlos Polop
3724e2729a f 2026-02-14 20:47:09 +01:00
Carlos Polop
616d1255a8 f 2026-02-14 17:54:58 +01:00
Carlos Polop
1829b6f80d f 2026-02-14 17:54:48 +01:00
Carlos Polop
967a945aa3 f 2026-02-14 15:50:33 +01:00
Carlos Polop
6e1f62369e f 2026-02-14 13:19:13 +01:00
Carlos Polop
7f51bac5af Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud 2026-02-13 11:15:37 +01:00
Carlos Polop
07ac612f63 f 2026-02-13 11:15:25 +01:00
SirBroccoli
d5284abf61 Merge pull request #257 from AI-redteam/gcp-workstations-privesc
Gcp workstations privesc & container escape [grte-bstevens]
2026-02-12 20:36:18 +01:00
SirBroccoli
08ca5b601d Merge pull request #258 from AMOussama/bedrock-agentcore-code-interpreter
arte-Oussama - Bedrock agentcore code interpreter
2026-02-12 20:36:02 +01:00
Oussama Ait Manssour
4557349141 docs(aws): add AgentCore Code Interpreter role pivot privesc 2026-02-12 18:35:30 +01:00
Carlos Polop
745851f56d f ht url 2026-02-12 14:18:33 +01:00
SirBroccoli
d319c5283b Merge pull request #254 from HackTricks-wiki/update_GatewayToHeaven__Finding_a_Cross-Tenant_Vulnerabil_20260203_185749
GatewayToHeaven Finding a Cross-Tenant Vulnerability in GCP'...
2026-02-12 14:10:09 +01:00
Carlos Polop
9b923592af Move Apigee post-exploitation technique into its own page 2026-02-12 14:06:56 +01:00
SirBroccoli
6d8fa0c2fc Merge pull request #256 from HackTricks-wiki/update_Trusting_Claude_With_a_Knife__Unauthorized_Prompt__20260206_184722
Trusting Claude With a Knife Unauthorized Prompt Injection t...
2026-02-12 14:04:54 +01:00
SirBroccoli
c8bd0b86fd Merge pull request #255 from MAAYTHM/patch-1
Fix typo in S3 encryption method
2026-02-12 14:01:52 +01:00
SirBroccoli
3c05bcfbf2 Merge pull request #253 from HackTricks-wiki/update_Threat_Actors_Using_AWS_WorkMail_in_Phishing_Campa_20260127_183842
Threat Actors Using AWS WorkMail in Phishing Campaigns
2026-02-12 13:30:45 +01:00
SirBroccoli
9f30d3f8e8 Merge pull request #252 from HackTricks-wiki/update_nodes_proxy_GET___Kubelet__exec_RCE_via_WebSocket__20260127_014641
nodes/proxy GET → Kubelet /exec RCE via WebSocket handshake ...
2026-02-12 13:20:29 +01:00
SirBroccoli
d4b7c719ea Merge pull request #251 from HackTricks-wiki/update_SharePointDumper_20260127_014432
SharePointDumper
2026-02-12 13:09:08 +01:00
Oussama Ait Manssour
9f57fc7119 Rename src/pentesting-cloud/aws-security/aws-privilege-escalation/src/pentesting-cloud/aws-security /aws-bedrock-agentcore-privesc.md to src/pentesting-cloud/aws-security/aws-privilege-escalation/aws-bedrock-agentcore-privesc/README.md 2026-02-12 11:04:17 +01:00
Oussama Ait Manssour
70738d211e Revise AWS Bedrock AgentCore Code Interpreter documentation
Updated the AWS Bedrock AgentCore documentation to clarify the Code Interpreter Role Pivot technique, including details on preconditions, required IAM actions, exploitation flow, and mitigation strategies.
2026-02-12 00:06:33 +01:00
Carlos Polop
d3f02fa469 f 2026-02-11 12:56:08 +01:00
Ben
2bb1292912 Remove countermeasures from GCP privilege escalation doc
Removed countermeasures section from GCP privilege escalation documentation.
2026-02-09 16:16:44 -06:00
Ben
0be98dc154 Remove hacktricks-training banner from documentation
Removed the inclusion of hacktricks-training banner from the GCP privilege escalation documentation.
2026-02-09 16:12:22 -06:00
Ben
6b1b2329c2 Clean up GCP Cloud Workstations privilege escalation doc
Removed introductory content and references related to Cloud Workstations.
2026-02-09 16:10:20 -06:00