Back to directory
WRITEUP #108

Exploiting Lambda Functions for Fun and Profit

CloudServerlessAWS Lambda misconfiguration
byMax Rattray
Program
-
Published
Aug 6, 2024
Added to HackDex
Aug 14, 2024
Read Full Writeuphttps://www.praetorian.com/blog/exploiting-lambda-functions-for-fun-and-profit/
RELATED WRITEUPS
The Hunt for ALBeast: A Technical Walkthrough
CloudAWS ALB
Addressed AWS defaults risks: OIDC, Terraform and Anonymous to AdministratorAccess
CloudOIDC
Double Agent: Exploiting Pass-through Authentication Credential Validation in Azure AD
CloudPrivilege escalation
Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources
CloudRCE
UnOAuthorized: Privilege Elevation Through Microsoft Applications
CloudPrivilege escalation

Built with ❤️ by Shubham Rawat