Releases: Hacking-the-Cloud/hackingthe.cloud
Releases · Hacking-the-Cloud/hackingthe.cloud
v2.4.13
What's Changed
- Added block expensive AWS API actions with SCPs article by @Frichetten in #406
- Update block-expensive-actions-with-scps.md by @Frichetten in #407
- Add precision regarding who can assume the role by @adraelll in #411
- Add Amplify vuln article by @Frichetten in #410
- Update exploit_amplify_vulnerability_in_same_account_scenario.md by @Frichetten in #412
- Update exploit_amplify_vulnerability_in_same_account_scenario.md by @Frichetten in #413
- Updated Lambda exploitation article by @Frichetten in #414
- Update exploit_amplify_vulnerability_in_same_account_scenario.md by @Frichetten in #415
- Added content on the GitLab OIDC article by @Frichetten in #420
- Added documentation for Azure Run Commands by @lsass-exe in #423
New Contributors
- @adraelll made their first contribution in #411
- @lsass-exe made their first contribution in #423
Full Changelog: v2.4.12...v2.4.13
Contributors
Frichetten, adraelll, and lsass-exe
Assets 2
v2.4.12
What's Changed
- Added cards to Azure pages by @Frichetten in #382
- Standardized required iam permissions icons by @Frichetten in #383
- Added alt tag to all profile images by @Frichetten in #384
- Fixed bad link in enumerate_principal_arn_from_unique_id.md by @pranavpudasaini in #385
- Fixed references to internal links and images by @Frichetten in #386
- Updated GitHub Actions cache to v4 by @Frichetten in #387
- Cloned all images locally by @Frichetten in #393
- Account ID Operational Security Update by @mosesrenegade in #395
- Enumerate root email address from AWS Console by @cloud-aware in #398
- fix typo by @EduardSchwarzkopf in #399
- Add article about finding secrets in public AMIs by @EduardSchwarzkopf in #400
- Update CONTRIBUTING.md by @Frichetten in #401
- Fix: Spelling and grammar for abusing managed identities page by @stormheartfox in #402
- Add Enumeration for ALL services for GCP by @WebbinRoot in #404
- Made some minor tweaks to the recent gcp enumeration article for formatting by @Frichetten in #405
New Contributors
- @pranavpudasaini made their first contribution in #385
- @EduardSchwarzkopf made their first contribution in #399
- @stormheartfox made their first contribution in #402
Full Changelog: v2.4.11...v2.4.12
Contributors
mosesrenegade, Frichetten, and 5 other contributors
Assets 2
v2.4.11
What's Changed
- Added reference to aws-lint-iam-policies by @michael-kirchner-at in #346
- Updated get-account-id-from-keys to include Aidan and Tal's research by @Frichetten in #347
- Added cards to route53_modification_privilege_escalation by @Frichetten in #349
- Added card to s3-bucket-replication-exfiltration by @Frichetten in #350
- Added card to get_iam_creds_from_console_session by @Frichetten in #352
- Added card to Intercept SSM Communications by @Frichetten in #353
- Added cards to Lambda Persistence by @Frichetten in #354
- Added cards to user-data-script-persistence and added link to IAM persistence methods article by @Frichetten in #355
- Added cards to run_shell_commands_on_ec2 by @Frichetten in #356
- Added cards to modify-guardduty-config by @Frichetten in #357
- Merged 2 user data priv esc articles into one by @Frichetten in #358
- Added intro to local_ec2_priv_esc_through_user_data by @Frichetten in #359
- Added article on role trust policies with wildcard principal element by @Frichetten in #362
- Update/new branding by @Frichetten in #367
- Fixing the logo for social cards by @Frichetten in #368
- Updated background color of social cards by @Frichetten in #369
- Updated banner image by @Frichetten in #370
- Trying a thinner banner by @Frichetten in #371
- Added new social card layout/style by @Frichetten in #372
- Added an admonition about HackTricks Cloud still plagiarizing people's work by @Frichetten in #373
- Added [Deprecated] to old methods by @Frichetten in #374
- Added smaller favicon by @Frichetten in #375
- Updated HackTricks warning by @Frichetten in #376
- Changed title of Derive a Principal ARN from an AWS Unique Identifier by @Frichetten in #379
- Added cards to stealh_perm_enum by @Frichetten in #380
- Added card to role chain juggling by @Frichetten in #381
New Contributors
- @michael-kirchner-at made their first contribution in #346
Full Changelog: v2.4.10...v2.4.11
Contributors
Frichetten and michael-kirchner-at
Assets 2
v2.4.10
What's Changed
- Updated GitHub Action dependencies by @Frichetten in #306
- Fixed orphaned_cloudfront_or_dns_takeover_via_s3 file name by @Frichetten in #308
- Added Mastodon link to 2023 wrap up by @Frichetten in #309
- Update guardduty-pentest.md by @m4wk in #312
- Added some minor flair to guardduty-pentest.md by @Frichetten in #313
- Added the star count to the 2023 wrap up by @Frichetten in #316
- Updated orphaned_cloudfront_or_dns_takeover_via_s3 to reference the new error by @Frichetten in #319
- Removed the period from the end of the author byline by @Frichetten in #320
- Create FUNDING.yml by @Frichetten in #321
- Removed conflicting content by @Frichetten in #322
- Fixed 404 pages popping up for 2 articles by @Frichetten in #323
- Added card templates to the CONTRIBUTING page by @Frichetten in #325
- Added a code block to the CONTRIBUTING page by @Frichetten in #326
- Added some additional context to the IAM Key Identifiers article and added a card by @Frichetten in #327
- Added card to enum_iam_user_role by @Frichetten in #328
- Added a card to the connection tracking article by @Frichetten in #329
- Added custom background color by @Frichetten in #330
- Revert "Added custom background color" by @Frichetten in #331
- Added better background color handling by @Frichetten in #332
- Added cards to abusing-container-registry by @Frichetten in #333
- Added the Required IAM Permissions card to templates by @Frichetten in #334
- Added card to cognito_identity_pool_excessive_privileges by @Frichetten in #335
- Updated Material for MKDocs dependencies by @Frichetten in #336
- Added card to local-priv-esc-mod-instance-att by @Frichetten in #337
- Added cards to iam_privilege_escalation by @Frichetten in #338
- Added card to cognito_user_self_signup by @Frichetten in #339
- Added the Bypass Cognito Account Enumeration Controls article by @Frichetten in #341
- Update bypass_cognito_user_enumeration_controls.md by @Frichetten in #342
- Update bypass_cognito_user_enumeration_controls.md by @Frichetten in #343
- Update bypass_cognito_user_enumeration_controls.md by @Frichetten in #344
- Update abusing-container-registry.md by @tragulum in #345
New Contributors
Full Changelog: v2.4.9...v2.4.10
Contributors
Frichetten, m4wk, and tragulum
Assets 2
v2.4.9
What's Changed
- Update robots.txt by @Frichetten in #289
- Added usage info for SneakyEndpoints by @Frichetten in #292
- Updated the whoami article with a new method by @Frichetten in #295
- Added permalink support for headings by @Frichetten in #298
- Added Aidan's technique to find a principal's ARN from a unique identifier by @Frichetten in #299
- Fix typo in a recent blog post by @aidansteele in #300
- Fixed the order of the Enumerate IAM User/Role article by @Frichetten in #301
- S3 server access logs by @costasko in #303
- Update aws_organizations_defaults.md with new AWS Organizations research by @WebbinRoot in #258
- Added 2023 year-end wrap up by @Frichetten in #305
New Contributors
- @aidansteele made their first contribution in #300
- @costasko made their first contribution in #303
- @WebbinRoot made their first contribution in #258
Full Changelog: v2.4.8...v2.4.9
Contributors
aidansteele, Frichetten, and 2 other contributors
Assets 2
v2.4.8
What's Changed
- Update get_iam_creds_from_console_session.md by @ramimac in #270
- Removed two unneeded summary headers in articles by @Frichetten in #271
- Added article: Download Tools and Exfiltrate Data with the AWS CLI by @Frichetten in #273
- Added tip to the AWS CLI lolscript article by @Frichetten in #274
- Add IAM privilege escalation techniques regarding deleting or updating IAM permissions boundaries by @delenamalan in #275
- Improved the EC2 SSRF article by @Frichetten in #276
- Add IAM persistence article by @Frichetten in #277
- Create robots.txt by @Frichetten in #281
- Updated the workflow badge by @Frichetten in #282
- Updated the banner to add Mastodon by @Frichetten in #288
- Added an article on using sts:GetFederationToken by @Frichetten in #287
New Contributors
- @ramimac made their first contribution in #270
- @delenamalan made their first contribution in #275
Full Changelog: v2.4.7...v2.4.8
Contributors
delenamalan, Frichetten, and ramimac
Assets 2
v2.4.7
What's Changed
- Autoscaling Technique by @gonda-praetorian in #262
- Updated references with grid cards for dangling subdomain article by @Frichetten in #264
- Fixed some formatting issues with the orphaned CloudFront grid cards by @Frichetten in #265
- Updated dev Dockerfile by @Frichetten in #267
- Added two new concepts to AWS exploitation associated with Amazon Cognito. by @righteousgambit in #269
New Contributors
- @gonda-praetorian made their first contribution in #262
Full Changelog: v2.4.6...v2.4.7
Contributors
Frichetten, righteousgambit, and gonda-praetorian
Assets 2
v2.4.6
What's Changed
- Update s3_streaming_copy.md by @houey in #247
- Updated image for CI/CDon't by @Frichetten in #248
- Update s3_streaming_copy.md by @houey in #249
- Added technique seen in the wild flag to create console session by @Frichetten in #250
- Updated CONTRIBUTING with information on cards by @Frichetten in #251
- Removed the note about aws_consoler by @Frichetten in #252
- Updated the guidance in this particular page on console access. by @mosesrenegade in #253
- Reformat the Create a Console Session from IAM Credentials page by @Frichetten in #254
- Add Technique Seen in the Wild card for Steal IAM Credentials and Event Data from Lambda by @Frichetten in #256
- s3-account-search works now by @benbridts in #259
- Updates to Enumeration Modules for Big 3 cloud providers. by @righteousgambit in #260
- Fix extra toc's that were added by @Frichetten in #261
New Contributors
- @benbridts made their first contribution in #259
Full Changelog: v2.4.5...v2.4.6
Contributors
mosesrenegade, benbridts, and 3 other contributors
Assets 2
v2.4.5
What's Changed
- Removed winter theming by @Frichetten in #233
- Demoing info cards at the top of an article by @Frichetten in #235
- Changed the project License by @Frichetten in #236
- Enumerate AWS root account ID from AWS Console by @Skullduggeryism in #237
- Fixed the missing page edit button by @Frichetten in #238
- Fix the missing title issue by @Frichetten in #239
- Fixed a weird bug where the title would disapear on pages without a # by @Frichetten in #240
- Fixed more missing titles in articles by @Frichetten in #241
- Added Bucket Replication Page by @bleemb in #242
- updating some typos and mentioning domain-protect by @houey in #245
- Create s3_streaming_copy by @houey in #246
New Contributors
- @Skullduggeryism made their first contribution in #237
Full Changelog: v2.4.4...v2.4.5
Contributors
houey, Frichetten, and 2 other contributors
Assets 2
v2.4.4
What's Changed
- Added region tags for ECR RBP article by @Frichetten in #215
- Winterize Hacking the Cloud by @Frichetten in #216
- Add happy holidays message by @Frichetten in #221
- Soft launch RSS support by @Frichetten in #222
- Changed author tag to author_name by @Frichetten in #223
- Added article on exposed EBS snapshots by @Frichetten in #224
- Add a few enhancements to EBS page by @christophetd in #225
- Update misconfigured_ecr_resource_policy.md by @Frichetten in #226
- Added glightbox for image zoom by @Frichetten in #229
- Add pep517 flag to install mkdocs-glightbox by @Frichetten in #231
- Add 2022 wrapup by @Frichetten in #230
- Grammar fix in 2022_wrap-up.md by @Frichetten in #232
New Contributors
- @christophetd made their first contribution in #225
Full Changelog: v2.4.3...v2.4.4
Contributors
christophetd and Frichetten