writeups.xyz / Chaining MFA-Enabled IAM Users with IAM Roles for Potential Privilege Escalation in AWS

Submitter : c2a

Date: 16 June 2022

Bounty : undisclosed

Vulnerabilities :

• Privilege Escalation

Programs :

• AWS

Authors :

• Jason Kao

Link :
https://www.praetorian.com/blog/stsgetsessiontoken-role-chaining-in-aws/