---
id: 4340
title: "When too much access is not enough: a story about Confluence and tokens"
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/a-story-about-confluence-and-tokens.html"
published_at: "2025-07-02 22:00"
tags: ["cloud", "aws", "red-team", "post-exploitation", "database", "api-tokens", "confluence"]
phying_url: "https://phying.com/item/4340"
lang: en
---

# When too much access is not enough: a story about Confluence and tokens

## Summary

Quarkslab red team story: after compromising a Confluence host and its database but lacking app credentials, they study the Confluence database structure and API token generation mechanism.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **Published:** 2025-07-02 22:00
- **Original:** https://blog.quarkslab.com/a-story-about-confluence-and-tokens.html
- **Phying News:** https://phying.com/item/4340