Author: Raj Chandel (published on Hacking Articles) Published: April 22, 2026 Source: https://www.hackingarticles.in/aws-cloudgoat-ec2-ssrf-exploitation/ Summary This Hacking Articles tutorial walks through the ec2_ssrf scenario in CloudGoat, Rhino Security Labs’ open-source “vulnerable by design” AWS training framework. It is a CTF-style, hands-on lab rather than a vulnerability disclosure — there is no CVE. The scenario chains a … Read more
Author: Raj Chandel (published on Hacking Articles) Published: January 16, 2026 Source: https://www.hackingarticles.in/aws-iam-updateloginprofile-abuse/ Summary This Hacking Articles tutorial demonstrates an AWS IAM privilege-escalation technique based on the iam:UpdateLoginProfile permission: a low-privileged IAM user who is allowed to call UpdateLoginProfile against a higher-privileged user can reset that user’s AWS Console password and then sign in as … Read more
Author: Fatima Aziz (published on Hacking Articles) Published: July 12, 2025 Source: https://www.hackingarticles.in/aws-iam-assumerole-privilege-escalation/ Summary This Hacking Articles tutorial demonstrates an AWS IAM privilege-escalation technique driven by misconfiguration rather than a software flaw: a low-privileged IAM user can assume a highly privileged IAM role when that role’s trust policy is written too permissively. By calling sts:AssumeRole … Read more
Author: Fatima Aziz (published on Hacking Articles) Published: July 16, 2025 Source: https://www.hackingarticles.in/aws-iam-createaccesskey-privilege-escalation/ Summary This Hacking Articles tutorial demonstrates a well-known AWS IAM privilege-escalation technique that stems from misconfiguration rather than any software flaw: a low-privileged IAM user who has been granted the iam:CreateAccessKey permission on other users can mint a fresh access key for … Read more
Author: OTW, Hackers-Arise Published: February 20, 2025 Source: https://hackers-arise.com/open-source-intelligence-or-osint-you-cant-hide-on-telegram/ Summary This Hackers-Arise article challenges the common belief that Telegram provides anonymity, walking through open-source intelligence (OSINT) techniques used to identify and de-anonymize Telegram users and to locate information across the platform. It is an educational OSINT/reconnaissance piece rather than a vulnerability writeup — there is … Read more
Author: aircorridor (AirCorridor), Hackers-Arise contributor Published: March 7, 2026 Source: https://hackers-arise.com/open-source-intelligence-osint-gathering-information-on-a-whatsapp-account/ Summary This Hackers-Arise tutorial demonstrates the open-source WhatsApp-OSINT tool for gathering publicly available account metadata about a WhatsApp user starting only from a phone number. It is an OSINT/reconnaissance walkthrough for security practitioners rather than a vulnerability writeup — there is no CVE, no … Read more
Author: Edra (edrabb.fr — Bug Bounty, Pentest, CTF) Published: August 9, 2026 Source: https://edrabb.fr/posts/full-chain-preauth-rce-jfrog-artifactory/ Summary Edra documents a five-step, pre-authentication remote code execution chain against JFrog Artifactory that goes from zero credentials to command execution with no prerequisites (no anonymous-access setting, repository, user permission, or license required). The write-up is framed around AI-assisted vulnerability research: … Read more
Author: Michael Dalton Published: March 31, 2026 (reported to Google June 1, 2025) Source: https://michaeldalton.au/posts/hacking-google-support Summary Michael Dalton documents a missing-authorization flaw in Google’s Real-time Support platform (the backend behind Google’s support chat/phone widgets) that exposed large volumes of support-case data. Starting from an API key hardcoded in Google’s client-side support-widget JavaScript, the researcher reached … Read more
Author: Arvin Shivram (brutecat) Published: May 22, 2026 Source: https://brutecat.com/articles/google-cloud-rce/ Summary Security researcher brutecat (Arvin Shivram) documents two separate vulnerability chains, three months apart, that each reached remote code execution inside Google Cloud’s production environment via the Application Integration platform. Both escalated from information disclosure and cross-tenant access to the ability to run RPCs as … Read more
Author: Arvin Shivram (brutecat) Published: November 1, 2024 (with later updates in 2025) Source: https://brutecat.com/articles/decoding-google/ Summary This is a methodology writeup, not a single-vulnerability disclosure. brutecat (Arvin Shivram) documents how to turn Google’s opaque internal APIs into a “white box” for security research: locating machine-readable API discovery documents, understanding how authentication works on the web … Read more
