Back to directory
WRITEUP #6164

Why I walked away from $30,000 of DJI bounty money

CloudAWS misconfiguration
by@d0tslash(Kevin Finisterre)
Program
DJI
Published
Nov 16, 2017
Added to HackDex
Sep 15, 2022
Read Full Writeuphttp://www.digitalmunition.com/WhyIWalkedFrom3k.pdf
RELATED WRITEUPS
The Hunt for ALBeast: A Technical Walkthrough
CloudAWS ALB
Addressed AWS defaults risks: OIDC, Terraform and Anonymous to AdministratorAccess
CloudOIDC
Double Agent: Exploiting Pass-through Authentication Credential Validation in Azure AD
CloudPrivilege escalation
Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources
CloudRCE
UnOAuthorized: Privilege Elevation Through Microsoft Applications
CloudPrivilege escalation

Built with ❤️ by Shubham Rawat