TGViewer
CloudSec Wine CloudSec Wine @cloud_sec · 2.27K subscribers
Post #223 699
🔶 Hacking AWS end-to-end - remastered

A remastering of one of greatest cloud security talk ever given, Daniel Grzelak's Kiwicon 2016 presentation where he shows IAM principal enumeration using resource policies, abusing vendor trust relationship confused deputies, and more. Slides and code: https://github.com/dagrz/aws_pwn

https://youtu.be/8ZXRw4Ry3mQ

#aws
Twitter Daniel Grzelak (@dagrz) | Twitter The latest Tweets from Daniel Grzelak (@dagrz). Founder of Milo Twitter. Peak Milo. At the intersection of cyber security, Milo, and stonks. https://t.co/uyVBMFtGUY. ap-southeast-2
More from @cloud_sec
  1. Oct 14, 2026🔶 Introducing Strands Box: AI agent sandboxes powered by Dogwood Strands Box is an open s…
  2. Oct 13, 2026👩‍💻 Azure's Weakest Link - Five Full Cross-Tenant Compromises Five critical Azure cross-…
  3. Oct 12, 2026🤖 The AI SDLC transformation playbook Atlassian's shared their own version of an AI SDLC…
  4. Oct 9, 2026⚠️ Discovering and exploiting a remote code execution vulnerability in OpenCode Datadog Se…
  5. Oct 8, 2026🤖 How DigitalOcean Manages Credentials for Autonomous Agents DigitalOcean Managed Agents…
  6. Oct 7, 2026👩‍💻 Storm-3168: Agentic-driven cloud attacks using compromised service principals Storm-…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →