AWS IAM Exploitation

In AWS, authorization is governed by the Identity and Access Management (IAM) service. Unfortunately, as most software configuration goes, there is ample opportunity for misconfigurations that result in security vulnerabilities. As it pertains to AWS IAM, this...

Creating a Project Sonar FDNS API with AWS

Intro Project Sonar is an initiative by Rapid7 where they perform internet-wide scanning then make the results available publicly for free. This data covers areas like HTTP responses, DNS records, and SSL certificates, and is accessible from their opendata site in the...