ECS-cape - Hijacking IAM Privileges in Amazon ECS
Amazon Elastic Container Service (ECS) is a popular container orchestration service that relies on IAM roles for fine-grained access control.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Cloud Village·27 min
Leo Tsaousis
Exploiting AWS Cognito misconfigurations to achieve privilege escalation and account takeover.
cloudawsiam+1
Main Stage·37 min
Yakir Kadkoda · Michael Katchinskiy · Ofek Itach
Six critical attack vectors exploiting implicit and internal shadow resources created by AWS services to achieve cross-tenant and account takeover.
awscloudshadow-resources+2
DCGVR Village·30 min
Deconstructing AWS Instance Metadata Service (IMDS) exploitation, abusing SSRF to harvest temporary IAM credentials and escalate cloud permissions.
awsimdscloud-security+2