Cloud Security

Escaping Google Cloud Application Integration Sandbox: Straight into Borg

by

Author: nopnop (@__nopnop) Published: August 26, 2026 Source: https://nopnop.pro/2026/08/26/escaping-google-cloud-application-integration-sandbox/ Summary Security researcher nopnop documents a sandbox-escape vulnerability, CVE-2025-0982, in Google Cloud’s Application Integration service. The service’s JavaScript task feature ran customer code on the Rhino engine (a Java-based JavaScript interpreter), and a weakness in its custom Java sandbox let the author break out and execute … Read more

AWS CloudGoat EC2 SSRF Exploitation

by

Author: Raj Chandel (published on Hacking Articles) Published: April 22, 2026 Source: https://www.hackingarticles.in/aws-cloudgoat-ec2-ssrf-exploitation/ Summary This Hacking Articles tutorial walks through the ec2_ssrf scenario in CloudGoat, Rhino Security Labs’ open-source “vulnerable by design” AWS training framework. It is a CTF-style, hands-on lab rather than a vulnerability disclosure — there is no CVE. The scenario chains a … Read more

AWS: IAM UpdateLoginProfile Abuse

by

Author: Raj Chandel (published on Hacking Articles) Published: January 16, 2026 Source: https://www.hackingarticles.in/aws-iam-updateloginprofile-abuse/ Summary This Hacking Articles tutorial demonstrates an AWS IAM privilege-escalation technique based on the iam:UpdateLoginProfile permission: a low-privileged IAM user who is allowed to call UpdateLoginProfile against a higher-privileged user can reset that user’s AWS Console password and then sign in as … Read more

AWS: IAM AssumeRole Privilege Escalation

by

Author: Fatima Aziz (published on Hacking Articles) Published: July 12, 2025 Source: https://www.hackingarticles.in/aws-iam-assumerole-privilege-escalation/ Summary This Hacking Articles tutorial demonstrates an AWS IAM privilege-escalation technique driven by misconfiguration rather than a software flaw: a low-privileged IAM user can assume a highly privileged IAM role when that role’s trust policy is written too permissively. By calling sts:AssumeRole … Read more

AWS: IAM CreateAccessKey Privilege Escalation

by

Author: Fatima Aziz (published on Hacking Articles) Published: July 16, 2025 Source: https://www.hackingarticles.in/aws-iam-createaccesskey-privilege-escalation/ Summary This Hacking Articles tutorial demonstrates a well-known AWS IAM privilege-escalation technique that stems from misconfiguration rather than any software flaw: a low-privileged IAM user who has been granted the iam:CreateAccessKey permission on other users can mint a fresh access key for … Read more