Nick Frichette on Mythryl: “Hey wake up! New offensive AWS meta just dropped! Thanks to Daniel…”

Hey wake up! New offensive AWS meta just dropped! Thanks to Daniel Grzelak, we now have an effective oracle for determining if resources are publicly exposed without leaving logs. (As an offsec person) LFG!!! www.plerion.com/blog/dont-ex...

plerion.comDon’t expose yourself in public — let AWS error messages do it for youAWS now reveals public permissions in error messages. Learn how a deny-all session policy exposes which actions would succeed safely.

20/2/26, 3:43 pm2 reposts2 likes

Post