Post

CodeBuild GitHub runners can become AWS persistence. Backdoor a role trust policy, connect a runner project to an attacker repo, and trigger workflows inside the victim account. hackingthe.cloud/aws/post_exp...