Commit Graph
712 Commits
Author SHA1 Message Date
BenandGitHub 8c472fbf01 Revise README for AWS MWAA execution role vulnerability
Updated README to reflect the AWS MWAA execution role vulnerability and its implications for security, including detailed attack vectors
2025-10-23 16:25:37 -05:00
BenandGitHub 65a1490ad0 Update README to clarify policy tightening process
Clarified the process of tightening the policy after deployment and the implications for defenders.
2025-10-23 13:24:27 -05:00
BenandGitHub 0d4fb441a9 Add README for AWS MWAA post-exploitation
fix location and structure
2025-10-23 13:20:36 -05:00
BenandGitHub 6fc8a8126e Add AWS MWAA post-exploitation documentation
Document the security risks and attack vectors associated with AWS MWAA's execution role, including data exfiltration and command and control channels.
2025-10-21 18:46:40 -05:00
carlospolop 08c2e42b76 f 2025-10-17 17:37:06 +02:00
carlospolop 1719f8ed3c f 2025-10-13 22:42:54 +02:00
carlospolop 9df8a4ac92 organize aws + new attacks 2025-10-09 12:26:40 +02:00
carlospolop 6dd86b2c9e rds post recheck 2025-10-07 17:28:10 +02:00
carlospolop 95302db34c AWS RDS post-exploitation: Out-of-band SQL via Data API + master password reset (Aurora) 2025-10-07 14:04:48 +02:00
SirBroccoliandGitHub 90bd042880 Merge pull request #219 from JaimePolop/master
IAM and KMS Post Exploitation extended
2025-10-07 11:02:17 +02:00
SirBroccoliandGitHub 1077cf6f89 Update AWS KMS post-exploitation documentation
Clarified KMS policy restrictions and updated ransomware sections.
2025-10-07 11:02:01 +02:00
carlospolop 27fd007fdd lambda attacks recheck 2025-10-07 00:41:18 +02:00
JaimePolop 29e379d07d IAM and KMS Post Exploitation extended 2025-10-06 19:01:11 +02:00
carlospolop 83663e4f98 dynamoDB attacks recheck 2025-10-06 13:14:59 +02:00
carlospolop b5b72b0d26 Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud 2025-10-06 11:53:38 +02:00
carlospolop 0f213ea2db aws secrets manager recheck 2025-10-06 11:53:33 +02:00
SirBroccoliandGitHub 35eafd8d54 Merge pull request #218 from JaimePolop/master
Secrets manager new attacks
2025-10-04 11:04:02 +02:00
SirBroccoliandGitHub 9508f50485 Update aws-secrets-manager-privesc.md 2025-10-04 11:03:30 +02:00
SirBroccoliandGitHub e188809f70 Update aws-secrets-manager-post-exploitation.md 2025-10-04 11:02:17 +02:00
carlospolop 4bc4e19891 f 2025-10-04 02:09:51 +02:00
carlospolop a0bbc75c9a f 2025-10-04 01:52:17 +02:00
carlospolop 58f5fb17af f 2025-10-04 01:46:26 +02:00
carlospolop ab41eee8e8 f 2025-10-04 01:39:58 +02:00
carlospolop 005de3a0e1 f 2025-10-04 01:36:08 +02:00
carlospolop abb82f5a11 f 2025-10-04 01:29:49 +02:00
carlospolop ea47be9876 f 2025-10-04 01:26:43 +02:00
carlospolop a9f99c670e f 2025-10-04 01:20:52 +02:00
carlospolop a1e67da3cd f 2025-10-04 01:18:23 +02:00
carlospolop d4b5bd37da f 2025-10-04 01:12:52 +02:00
carlospolop 9bb5984b1a f 2025-10-04 01:01:34 +02:00
JaimePolop 03a213fcdd Secrets manager new attacks 2025-10-02 13:23:37 +02:00
carlospolop 3da7552a83 Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud 2025-10-01 12:29:54 +02:00
carlospolop 927c77529c f 2025-10-01 12:29:48 +02:00
SirBroccoliandGitHub e9003a3050 Merge pull request #217 from JaimePolop/master
KMS DOS explanation
searchindex-en searchindex-ja
2025-10-01 12:22:35 +02:00
carlospolop 50520f6c7d f searchindex-es searchindex-tr searchindex-af searchindex-zh searchindex-hi searchindex-it searchindex-de searchindex-el searchindex-pl searchindex-pt searchindex-uk searchindex-sw 2025-10-01 12:00:16 +02:00
JaimePolop 6411d85ebf KMS DOS explanation 2025-10-01 11:58:25 +02:00
carlospolop 1b274752fd f searchindex-ko searchindex-sr 2025-10-01 11:54:20 +02:00
carlospolop 63f5aa81e3 f 2025-10-01 11:53:59 +02:00
carlospolop eb7245d3fd f 2025-10-01 11:50:22 +02:00
carlospolop 675092de06 Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud searchindex-fr 2025-10-01 11:37:16 +02:00
carlospolop 570c0f46af fix searchindex 2025-10-01 11:37:13 +02:00
Build master 2468851007 Update searchindex (purged history; keep current) 2025-09-30 22:08:01 +00:00
carlospolop d0ebc37eb3 Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud 2025-10-01 00:04:05 +02:00
carlospolop 79fd264473 Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud 2025-10-01 00:04:05 +02:00
carlospolop becec234f4 f 2025-09-30 23:46:30 +02:00
carlospolop 143e6bdfe9 f 2025-09-30 23:46:30 +02:00
carlospolop 2a5d2dea9e Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud 2025-09-30 23:45:47 +02:00
carlospolop 9b52c7953d Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud 2025-09-30 23:45:47 +02:00
Build master 07628e009a Update searchindex (purged history; keep current) 2025-09-30 19:15:32 +00:00
SirBroccoliandGitHub 8d39c38b58 Merge pull request #216 from HackTricks-wiki/update_Cooking_an_SQL_Injection_Vulnerability_in_Chef_Aut_20250930_182633
Cooking an SQL Injection Vulnerability in Chef Automate
2025-09-30 21:13:40 +02:00