Yet another sec guy, particularly interested in cloud security 🌩️ AWS Authorized Instructor at @awscloud Lead Ethical Hacker at @SoftServeInc
Polska
Joined June 2015
- Tweets1.1K
- Following685
- Followers1.4K
- Likes2.1K
Pinned Tweet
🔥New blog post🔥
"#AWS privilege escalation: exploring odd features of the Trust Policy"
a.k.a.
how to assume an IAM role without "sts:AssumeRole" permission?
rzepsky.medium.com/aws-privi…
Pawel Rzepa retweeted
Denial of wallet attacks are a very real thing 😬I think the official solution to this is to front your S3 bucket with CloudFront.
medium.com/@maciej.pocwierz/…
Pawel Rzepa retweeted
AWS CloudShell got container functionality this week. This felt like an opportunity to do a deep(-ish) dive into how CloudShell works under the hood.
I extracted some containers and listed some roles. I remembered that I suck at non-sequence diagrams. awsteele.com/blog/2024/01/11…
Pawel Rzepa retweeted
Thank you everyone who attended my talk @fwdcloudsec! The slides are here: frichetten.com/fwdcloudsec-2…
Pawel Rzepa retweeted
Think you are an AWS IAM expert? 🤖
Put on your attacker hat and play our new CTF: The Big IAM Challenge! 🎉
wiz.io/blog/the-big-iam-chal…
Pawel Rzepa retweeted
Today we share our Alibaba Cloud research for the first time, where we gained unauthorized access to other customers' databases in two different services 🚨
This complex research involved RCE, PE, Container escape, K8s lateral movement, and supply chain attack. Check it out 🧵
Pawel Rzepa retweeted
In addition to the SCP validator (aka linter), AWS also put together a collection of SCPs github.com/aws-samples/servi… and has a re:Inforce video from the author of that repo, Swara Gandhi youtube.com/watch?v=KFphCnN8…
Pawel Rzepa retweeted
This is an excellent writeup by Sylwia Budzynska on the fundamentals of static analysis, especially the practical graph theory background of the tools. It's important to understand how they work! github.blog/2023-03-31-codeq…
Pawel Rzepa retweeted
#CodeQL zero to hero part 1: the fundamentals of #static #analysis for #vulnerability #research
github.blog/2023-03-31-codeq…
Pawel Rzepa retweeted
I hacked into a @Bing CMS that allowed me to alter search results and take over millions of @Office365 accounts.
How did I do it? Well, it all started with a simple click in @Azure… 👀
This is the story of #BingBang 🧵⬇️
Interesting real-life cyber attack with a good kill chain analysis. It uncovers the all-too-common mistakes that lead to data theft, including hardcoded secrets and overlooked least privilege principles. Worth reading article 👇
⚔ Sysdig TRT just uncovered a nasty cloud attack. SCARLETEEL began with a compromised container & ended with privilege escalation into an #AWS account to steal proprietary software. Read more on the attack & takeaways to help you stay safe in the cloud: okt.to/drzW5y
Pawel Rzepa retweeted
New cloud security research! We found a method to bypass CloudTrail logging for both read AND write API actions in AWS Service Catalog! In addition, we also reported an issue with a lack of CloudTrail logging in AWS Control Tower. securitylabs.datadoghq.com/a…
Pawel Rzepa retweeted
My talk "What I Wish I Knew Before Pentesting AWS Environments" for SANS Pen Test Hackfest 2022 is now on YouTube! Check it out if you're interested in learning more ways to attack AWS environments.
youtube.com/watch?v=jq8SAF6i…
Pawel Rzepa retweeted
Found a cool CloudFormation StackSet feature that didn't get an announcement blogpost (yet?):
At this point it still seems very limited, but hopefully it will get more features over time
docs.aws.amazon.com/AWSCloud…
ALT following text from aws documentation: "Configuring a target account gate in AWS CloudFormation StackSets An account gate is an optional feature that lets you specify an AWS Lambda function to verify that a target account meets certain requirements before AWS CloudFormation StackSets begins stack operations in that account"
Pawel Rzepa retweeted
📜 Trying to get better at putting out rougher work!
To that end, I'm starting to externalize some of my internal knowledge hub - starting with an enumeration of Lambda risks. Let me know what I'm missing!
ramimac.github.io/wiki/lambd…
Pawel Rzepa retweeted
This was cool to read :)
Thanks @Rzepsky !
rzepsky.medium.com/aws-and-h…
Pawel Rzepa retweeted
This will be a little chaotic. Different IAM privileges depending on when your account was created and they are retiring some privileges.
AWS announces changes to AWS Billing, Cost Management, and Account consoles permissions
AWS announces the retirement of IAM actions for AWS Billing, Cost Management, and Account consoles under aws-portal service prefix, purchase-orders:ViewPurchase... aws.amazon.com/about-aws/wha…
A good example of threat lists in CI/CD: storage.googleapis.com/prd-e…
This 👆 is part of the worth-reading article: engineering.mercari.com/en/b… by @MercariDev
Pawel Rzepa retweeted
If you are running a public facing jupyter notebook, especially in AWS, heads up:
permiso.io/blog/s/christmas-…
Pawel Rzepa retweeted
Hats off to researchers at @Unit42_Intel for sharing a detailed write-up of two real-world cloud attacks they witnessed in AWS and GCP.
unit42.paloaltonetworks.com/…
I encourage other companies to follow their lead!
