ch0ic3/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2025-02-21 14:16:07 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
21d1fe7eee
PayloadsAllTheThings/FIX_AWS Amazon Lambda
History
Swissky 21d1fe7eee Fix name - Part 1
2019-03-07 00:07:14 +01:00
..
Images Fix name - Part 1 2019-03-07 00:07:14 +01:00
README.md Fix name - Part 1 2019-03-07 00:07:14 +01:00

README.md

Vulnerability Title

Vulnerability description - reference

Tools:

Summary

Something

Quick explanation

Exploit

Abhay Bhargav ‏https://twitter.com/abhaybhargav/status/1080034019230842880

@abhaybhargav 1 janv. Protip: When bughunting a #AWS #Lambda function, remember that the metadata objects are env-vars. Escalate privs after RCE with envvars. In this screenshot have a function that's vulnerable to a deserialization vuln (RCE) through which I have dumped the envvars with secrets

References