AWS Metadata Privilege Escalation: Exploiting IMDSv1 & IAM Roles
Deconstructing AWS Instance Metadata Service (IMDS) exploitation, abusing SSRF to harvest temporary IAM credentials and escalate cloud permissions.
Summary
OSINT and Reconnaissance Techniques
This presentation covers open-source intelligence gathering and passive reconnaissance methodologies. The speaker demonstrates tools and techniques for discovering security-relevant information without direct system interaction, including data mining, web scraping, and information synthesis from public sources.
(AI summary — Claude Haiku)
Related talks
Cloud Village·27 min
Leo Tsaousis
Exploiting AWS Cognito misconfigurations to achieve privilege escalation and account takeover.
Main Stage·37 min
Yakir Kadkoda · Michael Katchinskiy · Ofek Itach
Six critical attack vectors exploiting implicit and internal shadow resources created by AWS services to achieve cross-tenant and account takeover.
Cloud Village·40 min
Kavisha Sheth
Kavisha Sheth reviews top AWS cloud attack vectors, mapping adversary techniques to defensive detection rules and IAM governance controls.