Skip to content
When too much access is not enough: a story about Confluence and tokens
blog.quarkslab.com | research | #cloud | #aws | #red-team | #post-exploitation | #database | #api-tokens | #confluence
Summary
Quarkslab red team story: after compromising a Confluence host and its database but lacking app credentials, they study the Confluence database structure and API token generation mechanism.
- Published
- Collected