writeups.xyz / Red team: Journey from RCE to have total control of cloud infrastructure

Submitter : c2a

Date: 22 May 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• SSTI
• Container Escape
• Kubernetes
• Components With Known Vulnerabilities
• CI/CD

Programs :

• Undisclosed

Authors :

• Quang Vo (@Mr_r3bot)

Link :
https://mr-r3bot.github.io/red/team/2023/05/22/From-RCE-to-owning-entire-cloud-infrastructure.html