We hacked the AWS JavaScript SDK, a core library powering the entire @awscloud ecosystem - including the AWS Console itself 🤯
How did we do it? Just two missing characters was all it took.
This is the story of #CodeBreach 🧵👇
We (+@liormama) gained full access to EVERY database on Azure's flagship DB service 🤯
And all we needed was a single key 🔑
This is the story of #CosmosEscape 🧵👇
Excited to announce our talk "One Key to Rule Them All: Taking Over a Flagship Cloud Service" was accepted to @BlackHatEvents!
@liormama and I will share how an odd exception led us down a rabbit hole to uncover one of the most impactful cloud vulns to date💥
More details coming soon :) #BHUSA