ttps_attack:T1530 × latest_source_host:trustedsec.com × limpar

Resultados

2 casos · pág. 1/1

trustedsec.com · há 2d medium

TrustedSec releases waf-fu to harvest and replay credentials from AWS WAF logs exposing unredacted headers

TrustedSec researcher Lilly Mayo published waf-fu, an offensive tool that pulls AWS WAF log data into a local sqlite database and enables replay of logged requests. During an engagement, the author found WAF logs in CloudWatch that captured all headers unredacted, including session cookies and other authentication material, which can be r…

trustedsec.com · há 2d low

TrustedSec Red Team Guidance: Enumerating and Abusing Exposed AWS AKIA/ASIA Access Keys, and the CloudTrail Detection Points

TrustedSec published Part 1 of a red-team tradecraft series on what to do after finding plaintext AWS access keys during an engagement. It is educational content, not a report of a specific incident. It explains the difference between long-term AKIA keys (IAM user) and temporary ASIA keys (STS-issued, which also need a session token and a…