Background In our previous blog post, we talked about the recently-published DFSCoerce utility which is useful for forcing NTLM or Kerberos authentication by interacting with the Distributed File Service (DFS) over Remote Procedure Calls (RPC) on Windo…
Author: emmaline
Europe, Global Security News, North America, Vulnerabilities
Chaining MFA-Enabled IAM Users with IAM Roles for Potential Privilege Escalation in AWS
by emmaline •
Overview In AWS, sts:AssumeRole is an action within AWS’s Security Token Service that allows existing IAM principals to access AWS resources to which they may not already have access. For example, Role A can assume Role B and then use Role B’s privile…