Nick Frichette - Blog frichetten.com

Personal blog, focused on information security. AWS, Web apps, offensive techniques, and more.

Amplified exposure: How AWS flaws made Amplify IAM roles vulnerable to takeover
securitylabs.datadoghq.com·105w
Two Minor Cross-Tenant Vulnerabilities in AWS App Runner
frichetten.com·159w
Using an Undocumented Amplify API to Leak AWS Account IDs
frichetten.com·160w
A Look at AWS API Protocols
frichetten.com·169w
A Confused Deputy Vulnerability in AWS AppSync
frichetten.com·178w
OpenSSL Punycode Vulnerabiliy (CVE-2022-3602)
frichetten.com·181w
Revisiting Lambda Persistence
frichetten.com·240w
XSS in the AWS Console
frichetten.com·255w
Intercept SSM Agent Communications
frichetten.com·273w
Enumerate AWS API Permissions Without Logging to CloudTrail
frichetten.com·288w
Abusing AWS Connection Tracking
frichetten.com·297w
Abusing GitLab Runners
frichetten.com·302w
CVE-2020-11108: How I Stumbled into a Pi-hole RCE+LPE
frichetten.com·311w
Escalating Deserialization Attacks (Python)
frichetten.com·321w
Intercept Linux CLI Tool Traffic
frichetten.com·328w
Bypass GuardDuty PenTest Alerts
frichetten.com·346w
Hijacking IAM Roles and Avoiding Detection
frichetten.com·355w
IDOR Attacks
frichetten.com·359w
Security Headers: Content Security Policy
frichetten.com·385w
Angular Universal: Some Insights
frichetten.com·394w

Keyboard Shortcuts

Navigation
Next / previous item
j/k
Open post
oorEnter
Preview post
v
Post Actions
Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s
Recommendations
Add interest / feed
Enter
Not interested
x
Go to
Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Browse
gb
Search
/
General
Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help