search

Hacking-the-Cloud / hackingthe.cloud

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
https://hackingthe.cloud
Other
1.67k stars 211 forks source link

Autoscaling Technique #262

Closed gonda-praetorian closed 1 year ago

gonda-praetorian commented 1 year ago

This technique leverages a legacy autoscaling permission related to launch configurations and launch templates to create autoscaling groups with more privileged roles by abusing a confused deputy condition that trusts the EC2 service.

I plan to explain this attack path and constraints in a future blog post but I wanted to contribute this to the larger cloud security community.

Frichetten commented 1 year ago

Thank you for the contribution!