Hacking2

Check out the latest posts

How to Hack a Database in Under Five Minutes and How to Secure it

Initially, I intended to write an article about the new RDS brute force protection. And researching the two new RDS GuardDuty findings CredentialAccess:RDS/ AnomalousBehavior.SuccessfulLogin and CredentialAccess:RDS/ AnomalousBehavior.FailedLogin. But even after hours of trial and error, I could not trigger the GuardDuty finding. This article is for...

HackingIMDSv1 AWS

How to hack AWS instances that have the metadata service (IMDSv1) enabled

The biggest entrance door for attackers into your cloud environments are misconfigurations. In this article, we are going to explore the Instance Metadata Service (IMDS) and how attackers could exploit it and escalate their privileges. This article is for informational and educational purposes only. The focus is to enable AWS...