Speaker
NEW SCHEDULE:
✓ August 31 – September 3
NEW SCHEDULE:
✓ August 31 – September 3
✓ Workshop Day for free
✓ Raspberry Pi or C64 Mini for free
✓ Save over $840
Register now
✓ Workshop Day for free
✓ Raspberry Pi or C64 Mini for free
✓ Save over $840
Register now
✓ Workshop Day for free
✓ Raspberry Pi or C64 Mini for free
✓ Save up to $690
Register now
✓ Workshop Day for free
✓ Raspberry Pi or C64 Mini for free
✓ Save up to $690
Register now
✓ Group Discount
✓ Individual offers for
Freelancers and employees of scientific institutions
Register now
✓ Kollegenrabatt
✓ Sonderkonditionen für Freelancer und
Mitarbeiter von wissenschaftlichen Einrichtungen
Infos
15:15 - 16:00
Description
Demo of SSRF methodology of a website attack to takeover temporary AWS credentials. We will cover two demo’s showing how we can hijack access to EC2 using reserve shell with userdata script. Moreover we will follow approach to inject malicious code to Lambda function without having permissions to update code. End of session will be dedicated to show some examples of JSON policies solving most popular challenges regarding permissions in AWS.
This Session belongs to the Diese Session gehört zum Programm vom LondonLondon program. Take me to the program of . Hier geht es zum Programm von Berlin Berlin .
This Session belongs to the Diese Session gehört zum Programm vom LondonLondon program. Take me to the program of . Hier geht es zum Programm von New York New York .
This Session belongs to the Diese Session gehört zum Programm vom LondonLondon program. Take me to the program of . Hier geht es zum Programm von Singapore Singapur .