Privilege Escalation | writeups.xyz

Title	Vulnerabilities	Programs	Authors
Escalating From Reader To Contributor In Azure API Management	Privilege Escalation	Microsoft (Azure)	Christian Håland
Hijacking SQL Server Credentials using Agent Jobs for Domain Privilege Escalation	Privilege Escalation	Undisclosed	Scott Sutherland
Addressed AWS defaults risks: OIDC, Terraform and Anonymous to AdministratorAccess	Cloud OIDC Terraform Privilege Escalation	AWS	Eduard Agavriloae (@Saw_your_packet)
Double Agent: Exploiting Pass-through Authentication Credential Validation in Azure AD	Cloud Privilege Escalation Lateral Movement	Microsoft (Entra ID / Azure AD)	Ilan Kalendarov (@IKalendarov) Elad Beber
UnOAuthorized: Privilege Elevation Through Microsoft Applications	Cloud Privilege Escalation	Microsoft (Entra ID / Azure AD)	Eric Woodruff (@Ericonidentity)
Vestaboard: Exploring Broken Access Controls and Privilege Escalation	Broken Access Control Privilege Escalation	Vestaboard	Tyler Ramsbey (@Tyler_Ramsbey)
How I Earned $469 Bounty: Bypassing Plan Restriction	Privilege Escalation Broken Access Control	Undisclosed	Abhi Sharma (@A13h1_)
Escalating Privileges in Google Cloud via Open Groups	Cloud Privilege Escalation	Google (GCP)	Thomas Elling
Bypass Plan Restriction & Get 350$ Bounty	Privilege Escalation	Undisclosed	Abhi Sharma (@A13h1_)
ConfusedFunction: A Privilege Escalation Vulnerability Impacting GCP Cloud Functions	Privilege Escalation Cloud CI/CD	Google (GCP)	Liv Matan (@TerminatorLM)
Exploiting Broken Authentication Control In GraphQL	Cloud GraphQL Privilege Escalation	Undisclosed	Aleksa Zatezalo (@ZatezaloAleksa)
Exploiting GCP Cloud Build for Privilege Escalation	Privilege Escalation Cloud CI/CD	Google (GCP)	Ayush Singh (@Hac10101)
SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts	AI Cloud Kubernetes Privilege Escalation Missing Authentication	SAP	Hillai Ben-Sasson (@Hillai) Shir Tamari (@Shirtamari) Nir Ohfeld (@Nirohfeld) Sagi Tzadik (@Sagitz_) Ronen Shustin (@Ronenshh)
How I Discovered Authentication Bypass That Blocks Users from Accessing the Website ?	Application-Level DoS Privilege Escalation	Undisclosed	Mohamed Sayed (@Sayed_v2)
CVE-2024-27292: docAssembling exploits for RCE	RCE SSTI Path Traversal Privilege Escalation	Docassemble	Riyush Ghimire
Hijacking GitHub Runners To Compromise The Organization	CI/CD Privilege Escalation	Undisclosed	Hugo Vincent (@Hugow_vincent)
Arbitrary 1-click Azure tenant takeover via MS application	Cloud Privilege Escalation Cross-Tenant Vulnerability Phishing	Microsoft (Azure)	Arnau Ortega
Hello: I’m your Domain Admin and I want to authenticate against you	RCE Privilege Escalation Authentication Coercion Active Directory NTLM Internal Pentest	Microsoft	Ap (@Decoder_it)
So I Became A Node: Exploiting Bootstrap Tokens In Azure Kubernetes Service	Kubernetes Cloud Privilege Escalation	Microsoft (Azure)	Paul Barbé Kévin Schouteeten (@Scouty__)
Amplified exposure: How AWS flaws made Amplify IAM roles vulnerable to takeover (CVE-2024-28056)	Cloud Privilege Escalation	AWS	Nick Frichette (@Frichette_n)
Wiz Research finds architecture risks that may compromise AI-as-a-Service providers and consequently risk customer data; works with Hugging Face on mitigations	AI Malicious AI Model Cloud CI/CD RCE Insecure Deserialization Privilege Escalation Supply Chain Attack Cross-Tenant Vulnerability	Hugging Face	Shir Tamari (@Shirtamari) Sagi Tzadik (@Sagitz_)
From Discovery to Disclosure: ReCrystallize Server Vulnerabilities	Default Credentials LFI Authentication Bypass Privilege Escalation Unrestricted File Upload RCE	ReCrystallize Software	Paul Van Der Haas (@PvdH)
Broken access control in GoAnywhere Admin portal	Broken Access Control Privilege Escalation Path Traversal Security Code Review	Fortra (GoAnywhere)	Vu Chi Thanh
Hacking Terraform State for Privilege Escalation	Privilege Escalation Terraform	Undisclosed	Daniel Grzelak (@Dagrz)
Account Takeover [It Looked Secure at First]	IDOR Account Takeover Privilege Escalation Password Reset	Undisclosed	Cristi Vlad (@CristiVlad25)

Page 1 of 9