🔶 RogueOIDC: AWS Persistence and Evasion through attacker-controlled OIDC Identity Provider

This research shows what an attacker can achieve after creating a malicious OIDC identity provider in AWS and how they can do it. The article presents novel techniques and tools for persistence and evasion.

https://www.offensai.com/blog/rogueoidc-aws-persistence-and-evasion-through-attacker-controlled-oidc-identity-provider

(Use VPN to open from Russia)

#aws