🔶 Using AWS Certificate Manager as a covert exfiltration mechanism

This article demonstrates how AWS Certificate Manager can be exploited as a data exfiltration mechanism by storing arbitrary data in X.509 certificates' nsComments extension, allowing up to 2MB per certificate.

https://me.costaskou.com/articles/acmfs/

#aws