Hacking the Cloud on Mythryl: “AWS persistence can hide in a rogue OIDC provider. Backdoor a role…”

AWS persistence can hide in a rogue OIDC provider. Backdoor a role trust policy, then later use `AssumeRoleWithWebIdentity` to get fresh role credentials.

buff.lyIAM Rogue OIDC Identity Provider Persistence - Hacking The CloudObtain persistence by creating a rogue OIDC Identity Provider.

2/6/26, 2:05 pm0 reposts1 like

Post