Ashwin (@AshwinPathak26) profile picture

Ashwin

@AshwinPathak26
Joined March 2018
  • Tweets26
  • Following178
  • Followers66
Kubernetes migration: plan vs implementation
2
41
6
185
One of my favorite things about @SpecterOps (besides the obvious) is they always reference their resources at the beginning of their posts. Great example of giving credit where it is due: posts.specterops.io/introduc…
14
1
74
next couple of years its browsers and k8s all the way. shift softwares to browsers. move bakends to k8s. #thoughtleader
1
2
1
5
Hunting nonce-based CSP bypasses with dynamic analysis by @garethheyes portswigger.net/research/hun…
Hunting nonce-based CSP bypasses with dynamic analysis

Hunting nonce-based CSP bypasses with dynamic analysis

You might recall our post on a CSP bypass in PayPal; they used an allow list policy and we demonstrated how that was insecure but what about the other side of the coin? Nonce based policies are more s

portswigger.net
48
3
134
Kubernetes CVE-2021-25741: We can compromise a Node via host mount even if you block "hostPath" usage. This can achieve the same result with subpath volume mount feature. So if you restrict your Pods from using Hostpath, this bug's got your name on it. github.com/kubernetes/kubern…

CVE-2021-25741: Symlink Exchange Can Allow Host Filesystem Access · Issue #104980 · kubernetes/ku...

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the hos...

github.com
1
26
2
36
rback is a simple "RBAC in Kubernetes" visualizer. It queries all RBAC info and generates a graph of service accounts, (cluster) roles, and the respective access rules in dot format Read more: github.com/team-soteria/rbac…

GitHub - team-soteria/rback: RBAC in Kubernetes visualizer

RBAC in Kubernetes visualizer . Contribute to team-soteria/rback development by creating an account on GitHub.

github.com
21
72
Explaining "CrashLoopBackOff" 😅😅 @memenetes #Kubernetes
Josh Warburton (@JoshWarburton2) profile pictureJosh Warburton@JoshWarburton215 Aug 2021
2020 to 2021
2
68
2
202
KubeView displays what is happening inside a Kubernetes cluster (or single namespace), it maps out the API objects and how they are interconnected Read on github.com/benc-uk/kubeview
Image from Kube Builders (@KubeBuilders)
20
104
I guess I have to wipe the cluster and start over? We're just doing test and dev on #Kubernetes anyhow, right? #DevOps #DevSecOps #Cloud #InfoSec @memenetes #Serverless #MonkeyWork
5
53
2
155
Blogged! I wrote about a Discord's RCE I found. masatokinugawa.l0.cm/2020/10… (日本語) mksben.l0.cm/2020/10/discord… (English) youtube.com/watch?v=0f3RrvC-… (DEMO)
12
493
12
1,150
Ashwin retweeted
NULLCON (@nullcon) profile picture
NULLCON@nullcon5 Jan 2020
Ashwin Pathak (@AshwinPathak26) & Ajay Prashar (@9r4shar4j4y) will conduct a workshop on "Out-of-Band (OOB) Exploitation for Asynchronous Vulnerabilities" at #Nullcon2020. 🎟️Register today👉 bit.ly/2uDTJzF #Nullcon #DNS #Security #InfoSec #Firewall #Vulnerability
Image from NULLCON (@nullcon)
1
18
37
Ashwin retweeted
ippsec (@ippsec) profile picture
ippsec
@ippsec23 Dec 2019
Just uploaded "Advanced PHP Deserialization - PHAR Files", It's pretty much just me walking through the PHP Deserialization exploit @_s_n_t presented at @BlackHatEvents last year. youtube.com/watch?v=fHZKSCMW…
1
108
2
325
Do you know you can find related/trusted assets of an organization while browsing their website(s)? We wrote a @Burp_Suite extension to help you out. Read more here redhuntlabs.com/blog/asset-d…. #AssetDiscovery #BugBounty #Pentesting #OSINT
Image from RedHunt Labs | CTEM/ASM (@RedHuntLabs)
Image from RedHunt Labs | CTEM/ASM (@RedHuntLabs)
2
108
4
232
[CORS Exploitation Resources] Presentation: youtube.com/watch?v=wgkj4Zgx… Paper: bedefended.com/papers/cors-s… Write-ups: hackerone.com/reports/426165 hackerone.com/reports/426147 corben.io/tricky-CORS/ medium.com/@saamux/full-acco…
1
173
381
COM Under The Radar : Circumventing Application Control Solutions : bohops.files.wordpress.com/2… (Slides) Video : youtube.com/watch?v=shsEpbpQ… cc @bohops
9
20
Load more