2026-09-20 5 min
[notes]
CI/CD and Software Supply Chain Attack Surface
Self-hosted runners, Jenkins, dependency confusion, artifact poisoning, npm and PyPI trust, secrets in git history and Postman collections in a repo.
tail -f /var/log/hos
retired boxes, exploit notes, tooling we wrote because nothing else did the job.
324
posts
11
authors
weekly
cadence
grep all HackTheBox OSCP Preparation Privilege Escalation Linux Web Windows RCE Easy Active Directory Information Disclosure SSH Medium
> latest
2026-09-20 2 min
[notes]
Serverless, Queues and CDN Origin Exposure
AWS Lambda execution roles, cross-cloud serverless, SQS consumers that trust message content, and CDN origins still reachable without the edge in front.
2026-09-20 4 min
[notes]
Cloud Secrets, Storage and Key Management
S3 and cross-cloud storage policy, Terraform state, Azure Key Vault, SAS tokens, HashiCorp Vault and KMS: who can read, decrypt and sign.
2026-09-20 4 min
[notes]
Cloud IAM: Pivoting Between Identities
AWS STS AssumeRole, Azure managed identities, Entra ID, service principals, GCP impersonation and Cognito trust policies: movement without a password.
2026-09-20 3 min
[notes]
Kubernetes Attack Paths: RBAC, Tokens and Identity
From one RBAC verb to cluster control, plus ServiceAccount tokens, registry credentials, workload identity and admission webhooks that run before a pod exists.