f-lucini.bsky.social
@f-lucini.bsky.social
Reposted
New on @hackingthe.cloud! A great post by Federico Lucini on bypassing AWS Network Firewall egress filtering!

hackingthe.cloud/aws/post_exp...
AWS Network Firewall Egress Filtering Bypass - Hacking The Cloud
Bypass AWS Network Firewall Egress Filtering using SNI spoofing and Host Header manipulation.
hackingthe.cloud
September 29, 2025 at 2:30 PM
Reposted
Shoutout to @f-lucini.bsky.social for helping Hacking the Cloud up to date! With AWS' change to VPC Endpoint logging, many of the Cred Exfil bypasses no longer work. He added a section to the article and made improvements to SneakyEndpoints, the associated tool! hackingthe.cloud/aws/avoiding...
Bypass Credential Exfiltration Detection - Hacking The Cloud
When stealing IAM credentials from an EC2 instance you can avoid a GuardDuty detection by using VPC Endpoints.
hackingthe.cloud
July 14, 2025 at 8:54 PM