DataDog / stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud
https://stratus-red-team.cloud
Apache License 2.0
1.78k stars 208 forks source link

New attack technique: SendSerialConsoleSSHPublicKey #487

Open christophetd opened 7 months ago

christophetd commented 7 months ago

see also #467

https://unit42.paloaltonetworks.com/cloud-lateral-movement-techniques/

christophetd commented 6 months ago
siigil commented 3 months ago

Also mentioned in the following writeup for the "ec2-instance-connect:SendSerialConsoleSSHPublicKey" permission: