Carnal0wnage Blog blog.carnal0wnage.com

WeirdAAL update - get EC2 snapshots

blog.carnal0wnage.com·313w·Blogger

The Duality of Attackers - Or Why Bad Guys are a Good Thing™

blog.carnal0wnage.com·316w·Blogger

What is your GCP infra worth?...about ~$700 [Bugbounty]

blog.carnal0wnage.com·322w·Blogger

Devoops: Nomad with raw_exec enabled

blog.carnal0wnage.com·335w·Blogger

Minecraft Mod, Follow up, and Java Reflection

blog.carnal0wnage.com·365w·Blogger

Minecraft Mod, Mother's Day, and A Hacker Dad

blog.carnal0wnage.com·366w·Blogger

Jenkins - CVE-2018-1000600 PoC

blog.carnal0wnage.com·375w·Blogger

Jenkins - messing with exploits pt3 - CVE-2019-1003000

blog.carnal0wnage.com·375w·Blogger

Jenkins - Identify IP Addresses of nodes

blog.carnal0wnage.com·375w·Blogger

Jenkins - decrypting credentials.xml

blog.carnal0wnage.com·376w·Blogger

Jenkins - SECURITY-180/CVE-2015-1814 PoC

blog.carnal0wnage.com·376w·Blogger

Jenkins - SECURITY-200 / CVE-2015-5323 PoC

blog.carnal0wnage.com·376w·Blogger

Jenkins Master Post

blog.carnal0wnage.com·376w·Blogger

Jenkins - messing with exploits pt2 - CVE-2019-1003000

blog.carnal0wnage.com·376w·Blogger

Jenkins - messing with new exploits pt1

blog.carnal0wnage.com·376w·Blogger

Abusing Docker API | Socket

blog.carnal0wnage.com·380w·Blogger

Kubernetes: Kube-Hunter 10255

blog.carnal0wnage.com·382w·Blogger

Kubernetes: unauth kublet API 10250 token theft & kubectl

blog.carnal0wnage.com·382w·Blogger

Kubernetes: unauth kublet API 10250 basic code exec

blog.carnal0wnage.com·382w·Blogger

Kubernetes: List of ports

blog.carnal0wnage.com·382w·Blogger

Log in to enable infinite scrolling