It is a bit crazy how long it can take me to sit down and write these blogs (it’s been 4 years). I will spare you the promises of writing more often (though, truth to be told, I do want to start wr...

In this blog post I will present how metadata endpoints can be used by attackers to obtain credentials in three different cloud service providers: AWS, Azure, and GCP. I thought it would be interes...

A month ago, I decided to take the “Attacking and Defending Azure AD Cloud: Beginner’s Edition” bootcamp by Pentester Academy. While I have participated in some web app penetration tests and assess...