Escaped_Silo.pdf
1.5 MB
#Cloud_Security
BlackHat USA 2022:
" COW (Container On Windows) Who Escaped the Silo: Isolations are made to be broken"
]-> Tools for analyzing Windows containers and break container's isolation:
https://github.com/SafeBreach-Labs/CoWTools
📰
📚
BlackHat USA 2022:
" COW (Container On Windows) Who Escaped the Silo: Isolations are made to be broken"
]-> Tools for analyzing Windows containers and break container's isolation:
https://github.com/SafeBreach-Labs/CoWTools
📰
📚
Backdooring_hijacking_AzureAD_accounts.pdf
2.2 MB
#Cloud_Security
#Offensive_security
BlackHat USA 2022:
"Backdooring and Hijacking Azure AD Accounts by Abusing External Identities"
📰
📚
#Offensive_security
BlackHat USA 2022:
"Backdooring and Hijacking Azure AD Accounts by Abusing External Identities"
📰
📚
8_ways_compromise_ADFS.pdf
1.8 MB
#hardening
#Cloud_Security
"Eight ways to compromise AD FS certificates", 2022.
]-> Best practices for securing Active Directory Federation Services:
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/best-practices-securing-ad-fs#enable-protection-to-prevent-by-passing-of-cloud-azure-ad-multi-factor-authentication-when-federated-with-azure-ad
📰
📚
#Cloud_Security
"Eight ways to compromise AD FS certificates", 2022.
]-> Best practices for securing Active Directory Federation Services:
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/best-practices-securing-ad-fs#enable-protection-to-prevent-by-passing-of-cloud-azure-ad-multi-factor-authentication-when-federated-with-azure-ad
📰
📚
breaking_formation_aws.pdf
4.1 MB
#Research
#Cloud_Security
"Breaking Formation: From an Error Message to AWS Infrastructure", 2022.
📰
📚
#Cloud_Security
"Breaking Formation: From an Error Message to AWS Infrastructure", 2022.
📰
📚
Cloud_Sec_Tech_Architecture_V1.pdf
2.5 MB
#Cloud_Security
"Cloud Security Technical Reference Architecture", Ver. 1.0, 2021.
t.iss.one/Library_Sec
"Cloud Security Technical Reference Architecture", Ver. 1.0, 2021.
t.iss.one/Library_Sec
Checking_Security_Properties.pdf
206.5 KB
#Cloud_Security
"Checking Security Properties of Cloud Service REST APIs", 2020.
]-> RESTler - stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs:
https://github.com/microsoft/restler-fuzzer
t.iss.one/Library_Sec
"Checking Security Properties of Cloud Service REST APIs", 2020.
]-> RESTler - stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs:
https://github.com/microsoft/restler-fuzzer
t.iss.one/Library_Sec