| LeakyCLI: AWS and Google Cloud Command-Line Tools Can Expose Sensitive Credentials in Build Logs |
|
|
|
| Sys:All: How A Simple Loophole in Google Kubernetes Engine Puts Clusters at Risk of Compromise |
|
|
|
| Unauthenticated Access to GCP Dataproc Can Lead to Data Leak |
|
|
|
| Bad.Build: A Critical Privilege Escalation Design Flaw in Google Cloud Build Enables a Supply Chain Attack |
|
|
|
| From listKeys to Glory: How We Achieved a Subscription Privilege Escalation and RCE by Abusing Azure Storage Account Keys |
|
|
|
writeups.xyz
/
Roi Nisimi (@Roinisimi)