TyphoonCon

Shadows in the Cloud: The Invisible Pathways to Breaching AWS Accounts

This talk will introduce new attack vectors that have led to the discovery of multiple critical vulnerabilities in AWS services and open-source projects. We will showcase novel exploitation techniques that leverage default roles and shared resources within AWS to gain unauthorized access, leading to full account takeovers.