Mohit Gupta

@nojonesuk @matthewdfuller @0xdabbad00 @matthewdfuller github.com/WithSecureLabs… ;)

@nojonesuk @matthewdfuller @0xdabbad00 It is currently not open-source... maybe tomorrow it will be ;) The issue we had was permission boundary policies weren't always being returned. Especially if it was a managed policy which was only used as a permission boundary.

AWS wishlist: a single IAM API that returns the policies attached to a user/role. Today, it involves 4-5 calls: • listRolePolicies • listAttachedRolePolicies • getRolePolicy • getPolicy • getPolicyVersion

@nojonesuk @matthewdfuller @0xdabbad00 As for the filtering - tbh I just use jq xD

Very honoured to be selected alongside @_Skybound to present at fwd:cloudsec 2024! We're gonna rock some boats and discuss approaches for testing at scale. Not gonna spoil too much rn 😘

NEW TOOL: IceKube gives you a cool edge over attackers. This new tool from @_skybound generates a graph database of a Kubernetes cluster & analyzes the relationships to identify potential attack paths. Get it now on GitHub>> labs.withsecure.com/tools/icekube-… #CyberSecurity #cyberattacks

@LisaForteUK Count me in

Attention Europe infosec folks: some of us are forming a team of people willing to give up their time if needed to support healthcare providers who may suffer attacks at this difficult time. The more volunteers the better. If you can help please get in touch! RT for reach people!

from @rbmaslen, @CarlGottlieb and @myexploit2600, with workshops from @linuxthor, @TimmehWimmy and @_Skybound alongside fantastic company at the after party, special mention to @b4stiel and friends for quite an interesting conversation to end the night with.

New hccapx format for improved WPA/WPA2 cracking explained: hashcat.net/forum/thread-6…