• Information Security

  • Back

Part 4: AWS SageMaker AI, SageMaker Unified Studio & App Runner (Escalating Privileges via AWS CodeConnections)

SageMaker Unified Studio is a suite of tools from AWS that are combined to provide a single data and AI development environment. This service provides it's own dedicated...

 by  Read more...

Part 3: AWS CodePipeline (Escalating Privileges via AWS CodeConnections)

According to AWS, CodePipeline automates the build, test, and deploy phases of your release process each time a code change occurs.

 by  Read more...

Part 2: AWS CodeBuild (Escalating Privileges via AWS CodeConnections)

In this post we show how to use a malicious Docker Image to monitor network traffic within CodeBuild and find undocumented AWS API calls. From this we'll find...

 by  Read more...

Part 1: Overview of AWS CodeConnections (Escalating Privileges via AWS CodeConnections)

AWS CodeConnections (formally called CodeStar Connections) is a feature in AWS which allows AWS resources such as AWS CodePipeline to connect to external code repositories. This is often...

 by  Read more...

Project: Escalating Privileges via AWS CodeConnections

In this series of blogposts we’ll be taking an in-depth look at the security of AWS CodeConnections and their use in several different AWS Services. As CodeConnections become...

 by  Read more...

Project: Intercepting Network Traffic

One of the key bits of tooling that I run on my Proxmox homelab is a set of VMs that allow me to intercept network requests for analysis...

 by  Read more...

Project: Proxmox Homelab

Way back in 2014 I started experimenting with bare-metal Virtualisation. At that time I had mainly been experimenting with the Xen Hypervisor with the aim to get Windows,...

 by  Read more...

Project: Honeypot

For this project I wanted to experiment with the consequences of putting a server directly on the internet and what attackers would do with that. So I leveraged...

 by  Read more...

NathamCon – CTF 2021

In the end I only had a few hours to participate in the conference so I didn’t manage to get many of the challenges done. The ones I...

 by  Read more...

Project: Personal Data Stores

Whilst working within R&D in 2020 and 2021 I was brought onto the CornMarket team to work on their new initiative into personal data stores. Prior to this...

 by  Read more...

Viewing results: 1 to 10 of 15