121.Resource-Based Constrained Delegation: AD Security 101vulnerability | 2023-06-23 15:14 | semperis.com | Original ↗ | .md | #active-directory | #privilege-escalation | #kerberos
122.AD Security 101: Non-Default Security Principals with DCSync Rightsblog | 2023-05-25 02:48 | semperis.com | Original ↗ | .md | #active-directory | #credential-theft | #privilege-escalation
123.Windows Task Scheduler Application, Version 19044.1706 Advisoryvulnerability | 2023-04-04 00:00 | CVE-2023-21541 | bishopfox.com | Original ↗ | .md | #microsoft | #privilege-escalation | #windows
124.Microsoft Intune, Version 1.55.48.0 Advisoryblog | 2023-04-04 00:00 | bishopfox.com | Original ↗ | .md | #microsoft | #privilege-escalation | #vulnerability
125.Privilege escalation in AWS Elastic Kubernetes Serviceresearch | 2023-04-02 00:00 | calif.io | Original ↗ | .md | #cloud | #aws | #vulnerability-research
126.Escalating Privileges with Azure Function Appsblog | 2023-03-23 00:00 | netspi.com | Original ↗ | .md | #cloud | #rce | #cloud-security
127.Transitive Trust and Breaking Trust Transitivity: AD Security 101blog | 2023-03-14 13:00 | semperis.com | Original ↗ | .md | #active-directory | #privilege-escalation | #kerberos
128.Pivoting Clouds in AWS Organizations – Part 2: Examining AWS Security Features and Tools for Enumerationblog | 2023-03-07 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #aws
129.Pivoting Clouds in AWS Organizations – Part 1: Leveraging Account Creation, Trusted Access, and Delegated Adminblog | 2023-03-06 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #aws
130.Readline crime: exploiting a SUID logic bugblog | 2023-02-16 13:00 | blog.trailofbits.com | Original ↗ | .md | #linux | #privilege-escalation | #exploit
131.Pivoting with Azure Automation Account Connectionsblog | 2023-02-16 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #automation
132.How to Gather Azure App Configurationsblog | 2022-12-08 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #secrets
133.Atlassian Jira Align, Version 10.107.4 Advisoryblog | 2022-10-24 00:00 | CVE-2022-36802 | bishopfox.com | Original ↗ | .md | #cloud | #privilege-escalation | #ssrf
134.SMTP Matching Abuse in Azure ADblog | 2022-08-30 00:01 | semperis.com | Original ↗ | .md | #cloud | #active-directory | #privilege-escalation
135.Attacking and Remediating Excessive Network Share Permissions in Active Directory Environmentsincident | 2022-08-09 00:00 | netspi.com | Original ↗ | .md | #open-source | #remediation | #active-directory
136.CVE-2022-26923: Know Your AD Vulnerabilityvulnerability | 2022-08-02 01:30 | CVE-2022-26923 | semperis.com | Original ↗ | .md | #active-directory | #privilege-escalation | #vulnerability
137.Using CloudTrail to Pivot to AWS Accountsblog | 2022-06-07 00:00 | bishopfox.com | Original ↗ | .md | #cloud | #cloud-security | #aws
138.Abusing Azure Hybrid Workers for Privilege Escalation – Part 2: An Azure PrivEsc Storyvulnerability | 2022-04-14 00:00 | netspi.com | Original ↗ | .md | #cloud | #privilege-escalation | #azure
139.Abusing Azure Hybrid Workers for Privilege Escalation – Part 1vulnerability | 2022-03-17 00:00 | netspi.com | Original ↗ | .md | #cloud | #privilege-escalation | #azure
140.Escalating from Logic App Contributor to Root Owner in Azureblog | 2022-03-09 00:00 | netspi.com | Original ↗ | .md | #cloud | #privilege-escalation | #path-traversal
141.gMSA Active Directory Attacksblog | 2022-03-01 07:08 | semperis.com | Original ↗ | .md | #active-directory | #privilege-escalation | #detection
142.How to Catch Broken Access Control Security Vulnerabilities in Code Review Part 2blog | 2022-01-05 00:00 | hackerone.com | Original ↗ | .md | #access-control | #code-review | #privilege-escalation
143.3 Steps to Mitigating Two Recent Active Directory Domain Service Privilege Escalation Security Flawsvulnerability | 2021-12-23 15:52 | semperis.com | Original ↗ | .md | #active-directory | #privilege-escalation | #mitigation
144.Why is Exposing the Docker Socket a Really Bad Idea?research | 2021-12-13 23:00 | blog.quarkslab.com | Original ↗ | .md | #linux | #privilege-escalation | #containers
145.IAM Vulnerable - Assessing the AWS Assessment Toolsvulnerability | 2021-09-23 00:00 | bishopfox.com | Original ↗ | .md | #cloud | #cloud-security | #aws
146.How Attackers Can Use Active Directory Primary Group Membership for Defense Evasionblog | 2021-09-20 21:34 | semperis.com | Original ↗ | .md | #active-directory | #privilege-escalation | #detection
147.IAM Vulnerable - An AWS IAM Privilege Escalation Playgroundvulnerability | 2021-09-09 00:00 | bishopfox.com | Original ↗ | .md | #cloud | #cloud-security | #aws
148.Escalating Azure Privileges with the Log Analytics Contributor Roleblog | 2021-09-13 00:00 | netspi.com | Original ↗ | .md | #cloud | #privilege-escalation | #azure
149.Illogical Apps – Exploring and Exploiting Azure Logic Appsblog | 2021-08-26 00:00 | netspi.com | Original ↗ | .md | #cloud | #cloud-security | #privilege-escalation
150.eCatcher Desktop, Version 6.6.4 Advisoryvulnerability | 2021-08-17 00:00 | CVE-2021-33214 | bishopfox.com | Original ↗ | .md | #privilege-escalation | #vulnerability | #advisory