97af0f5005
Added access entry abuse info
...
Added sections on abusing configmap (existing) and access entries (new) for AWS EKS, including commands for creating access entries and associating access policies.
2026-05-28 09:06:51 +02:00
2aea30dad8
Merge pull request #295 from HackTricks-wiki/teamcity-security-section
...
Add TeamCity CI/CD pentesting section
2026-05-26 21:32:53 +02:00
e9b5f23f8a
Add TeamCity CI/CD pentesting section
2026-05-26 21:31:37 +02:00
23530050c5
Merge pull request #293 from HackTricks-wiki/update_Navigating_Lax_Load_Balancers__When_an_Intersectio_20260525_145126
...
Navigating Lax Load Balancers When an Intersection Gets You ...
2026-05-26 21:11:31 +02:00
af48369ba7
Merge pull request #292 from HackTricks-wiki/update_Paved_With_Intent__ROADtools_and_Nation-State_Tact_20260522_143732
...
Paved With Intent ROADtools and Nation-State Tactics in the ...
2026-05-26 21:09:38 +02:00
ae1056fe51
Merge pull request #290 from HackTricks-wiki/update_Mini_Shai-Hulud__FAQ_on_the_TeamPCP_npm_and_PyPI_s_20260521_195353
...
Mini Shai-Hulud FAQ on the TeamPCP npm and PyPI supply-chain...
2026-05-26 21:04:47 +02:00
b4424204e9
Update README.md
2026-05-26 21:04:31 +02:00
5400f7c96a
Merge pull request #288 from HackTricks-wiki/chore/drop-redundant-robots-invalidation-20260519
...
Avoid redundant robots CloudFront invalidations
2026-05-26 21:00:53 +02:00
2439b0354b
Merge pull request #294 from Jacob-Ham/aws-fix-iam-mfa
...
Fixed some IAM MFA device priv esc issues.
2026-05-26 20:06:25 +02:00
3963a1ef8a
Fixed virtual mfa device creation command, add example TOTP tool, add command for getting mfa backed session
2026-05-26 12:54:52 -05:00
06a089227c
f
2026-05-26 17:55:54 +02:00
aa93024621
Add content from: Navigating Lax Load Balancers: When an Intersection Gets You...
2026-05-25 14:55:45 +00:00
28650f17b4
Add content from: Paved With Intent: ROADtools and Nation-State Tactics in the...
2026-05-22 14:43:02 +00:00
5704b992d8
Add content from: Red-Teaming Cloud Infrastructure with Neo
2026-05-22 09:06:12 +00:00
1484d713ec
Add content from: Mini Shai-Hulud: FAQ on the TeamPCP npm and PyPI supply-chai...
2026-05-21 19:57:44 +00:00
4ae4b59345
Avoid redundant robots CloudFront invalidations
2026-05-19 08:16:18 +02:00
8cb43f6b52
Keep sponsor title visible on hover
2026-05-18 21:36:03 +02:00
4345b0e6bb
Refine sponsor hover and update CTA styling
2026-05-18 21:10:45 +02:00
c1bd048854
Add page update request nav link
2026-05-18 21:03:00 +02:00
caf7c4bcfd
Improve sponsor ad hover layout
2026-05-18 20:51:59 +02:00
72f0f71ef5
Merge pull request #287 from JaimePolop/master
...
a
2026-05-18 17:32:37 +02:00
51f602b871
a
2026-05-18 17:10:42 +02:00
e839fdd130
f
2026-05-11 16:51:50 +02:00
b7832d4f82
Increase sponsor hover CTA text size
2026-05-09 21:49:49 +02:00
4244ebd156
Increase sponsor hover CTA prominence
2026-05-09 21:26:35 +02:00
a80a62503c
Tune sponsor hover text and CTA size
2026-05-09 21:01:46 +02:00
2afd0745f7
Prevent sponsor text CTA overlap
2026-05-09 20:36:22 +02:00
4efde9fabe
Fix sponsor hover text placement
2026-05-09 19:02:23 +02:00
7759eb35db
Improve sponsor hover layout
2026-05-09 18:50:44 +02:00
39db3878cf
Improve SEO metadata and translation discovery
2026-05-09 17:34:28 +02:00
d13c270d7f
Merge pull request #286 from JaimePolop/master
...
Add WireServer & GoalState
2026-05-05 18:18:44 +02:00
2fe01e873a
Mention WireServer MI selector fallback
2026-05-05 17:50:24 +02:00
2a4cc7c428
Document Azure MI token discovery limits
2026-05-05 17:45:43 +02:00
406b2549aa
Replace brittle managed identity enumeration examples
2026-05-05 16:27:01 +02:00
393c6997b1
Clarify Azure WireServer access contexts
2026-05-05 16:16:00 +02:00
2f2df45366
Update README.md
2026-05-05 15:31:53 +02:00
28a5f23cd9
Merge pull request #279 from HackTricks-wiki/update_IAM_the_Captain_Now___Hijacking_Azure_Identity_Acc_20260409_132358
...
IAM the Captain Now – Hijacking Azure Identity Access
2026-05-05 15:17:16 +02:00
6f461640c2
Add WireServer & GoalState
2026-05-05 14:33:29 +02:00
b0cd651c8d
Add WireServer & GoalState
2026-05-05 14:25:14 +02:00
a80e28427b
Merge pull request #285 from ZoneMix/master
...
Update User Password Addition
2026-05-03 10:45:20 +02:00
7f789f1bc1
Merge pull request #284 from 0x1347/arte-veue
...
arte-veue
2026-05-03 10:44:53 +02:00
cee4c97967
Update user password update privilege escalation technique
2026-05-02 17:05:49 -05:00
95ec89cc7b
f
2026-05-01 00:29:47 +02:00
6447449ade
Merge branch 'master' of github.com:HackTricks-wiki/hacktricks-cloud
2026-04-30 21:29:49 +02:00
bc899d4b0b
f
2026-04-30 21:29:35 +02:00
c27dd45393
Merge pull request #283 from HackTricks-wiki/update_The_npm_Threat_Landscape__Attack_Surface_and_Mitig_20260425_021054
...
The npm Threat Landscape Attack Surface and Mitigations
2026-04-28 01:25:02 +02:00
627ae260b8
Merge pull request #277 from HackTricks-wiki/update_Cracks_in_the_Bedrock__Escaping_the_AWS_AgentCore__20260408_020957
...
Cracks in the Bedrock Escaping the AWS AgentCore Sandbox
2026-04-28 01:23:06 +02:00
2e66838b27
arte-veue
2026-04-28 00:10:52 +02:00
7ca12b41ef
Add content from: The npm Threat Landscape: Attack Surface and Mitigations
2026-04-25 02:14:06 +00:00
979375b432
Merge pull request #280 from Local-Guy-123/local-guy-ssm-update-doc-privesc-persist
...
arte-Hex-Editor
2026-04-21 10:19:44 +02:00
Christian Barral