And we couldn't let August end without publishing our writeups for the @cloudvillage-dc.bsky.social CTF at @defcon.bsky.social
unicrons.cloud/en/2025/08/3...
unicrons.cloud/en/2025/08/3...
WriteUp: Cloud Village CTF DEFCON 33 - unicrons.cloud
unicrons.cloud
August 31, 2025 at 8:40 AM
And we couldn't let August end without publishing our writeups for the @cloudvillage-dc.bsky.social CTF at @defcon.bsky.social
unicrons.cloud/en/2025/08/3...
unicrons.cloud/en/2025/08/3...
Wiz already released the new challenge for this month, so it is time to show how we solved the previous one!
We always wanted to dig more about containers escaping, so it was a perfect opportunity to learn.
unicrons.cloud/en/2025/08/1...
We always wanted to dig more about containers escaping, so it was a perfect opportunity to learn.
unicrons.cloud/en/2025/08/1...
WriteUp: Cloud Security Championship #2 - Contain Me If You Can - unicrons.cloud
unicrons.cloud
August 28, 2025 at 7:34 PM
Wiz already released the new challenge for this month, so it is time to show how we solved the previous one!
We always wanted to dig more about containers escaping, so it was a perfect opportunity to learn.
unicrons.cloud/en/2025/08/1...
We always wanted to dig more about containers escaping, so it was a perfect opportunity to learn.
unicrons.cloud/en/2025/08/1...
We're at @fwdcloudsec.org and we have stickers. I do not know what else to say so just find us (or the stickers we left around 😂)
June 30, 2025 at 9:45 PM
We're at @fwdcloudsec.org and we have stickers. I do not know what else to say so just find us (or the stickers we left around 😂)
Did you think we had forgotten about the IAM series? Well, you were right. Sorry for the delay, but here we are again.
Today SNS as starring guest. ⭐️
unicrons.cloud/en/2025/02/2...
Today SNS as starring guest. ⭐️
unicrons.cloud/en/2025/02/2...
IAM policy mishaps: Case 2 - SNS - unicrons.cloud
unicrons.cloud
March 10, 2025 at 11:13 AM
Did you think we had forgotten about the IAM series? Well, you were right. Sorry for the delay, but here we are again.
Today SNS as starring guest. ⭐️
unicrons.cloud/en/2025/02/2...
Today SNS as starring guest. ⭐️
unicrons.cloud/en/2025/02/2...
Reposted by unicrons.cloud
Do you agree with this chatGPT definition of "misconfiguration" in a cloud security context?
How would you define it?
How would you define it?
March 1, 2025 at 11:02 AM
Do you agree with this chatGPT definition of "misconfiguration" in a cloud security context?
How would you define it?
How would you define it?
Reposted by unicrons.cloud
The self described “Shodan of AWS” is now live! This is an amazing project from Daniel Grzelak that helps democratize cloud resource enumeration for the masses. Very excited about this!
awseye.com
awseye.com
Awseye - See Inside AWS Accounts
Awseye tracks publicly accessible AWS data to help identify and secure known and exposed AWS resources. Empowering defenders with open-source intelligence.
awseye.com
November 26, 2024 at 2:31 AM
The self described “Shodan of AWS” is now live! This is an amazing project from Daniel Grzelak that helps democratize cloud resource enumeration for the masses. Very excited about this!
awseye.com
awseye.com
In one hour we will be talking about Cloud Security in #AWSCommunityDaySpain 😬
PD: we have stickers... 🦄
PD: we have stickers... 🦄
October 19, 2024 at 10:18 AM
In one hour we will be talking about Cloud Security in #AWSCommunityDaySpain 😬
PD: we have stickers... 🦄
PD: we have stickers... 🦄
On our way to #AWSCommunityDaySpain 🚆 to talk about how to build your own CSPM with @steampipeio, AWS SecurityHub and AWS Organizations.
October 18, 2024 at 8:31 AM
On our way to #AWSCommunityDaySpain 🚆 to talk about how to build your own CSPM with @steampipeio, AWS SecurityHub and AWS Organizations.
Do you have a tool that needs permissions across all your AWS accounts? Do you want to manage it using IaC? Check out our latest post! https://unicrons.cloud/en/2024/10/14/deploy-iam-roles-across-an-aws-organization-as-code/
Deploy IAM Roles across an AWS Organization as code - unicrons.cloud
unicrons.cloud
October 14, 2024 at 12:46 PM
Do you have a tool that needs permissions across all your AWS accounts? Do you want to manage it using IaC? Check out our latest post! https://unicrons.cloud/en/2024/10/14/deploy-iam-roles-across-an-aws-organization-as-code/
Here we go! @fwdcloudsec
September 17, 2024 at 7:15 AM
Here we go! @fwdcloudsec
You know us, if we see a scoreboard, there we go. And last weekend, we weren't at #defcon32, but we didn't miss the opportunity to participate in the @cloudvillage_dc CTF😬
Here we you have the 5 challenges we were able to solve:
https://unicrons.cloud/en/2024/08/13/writeup-cloud-village-ctf-2024/
Here we you have the 5 challenges we were able to solve:
https://unicrons.cloud/en/2024/08/13/writeup-cloud-village-ctf-2024/
WriteUp: Cloud Village CTF 2024 - unicrons.cloud
unicrons.cloud
August 13, 2024 at 5:53 PM
You know us, if we see a scoreboard, there we go. And last weekend, we weren't at #defcon32, but we didn't miss the opportunity to participate in the @cloudvillage_dc CTF😬
Here we you have the 5 challenges we were able to solve:
https://unicrons.cloud/en/2024/08/13/writeup-cloud-village-ctf-2024/
Here we you have the 5 challenges we were able to solve:
https://unicrons.cloud/en/2024/08/13/writeup-cloud-village-ctf-2024/
Y aquí tenéis el enlace del feed en español: https://unicrons.cloud/es/feed.xml
unicrons.cloudIAM policy mishaps: Case 1 - S3IAM policy mishaps: Intro to IAM
unicrons.cloud
June 22, 2024 at 3:58 PM
Y aquí tenéis el enlace del feed en español: https://unicrons.cloud/es/feed.xml
We have just enabled the RSS feed on our blog. You can subscribe here: https://unicrons.cloud/en/feed.xml
unicrons.cloudIAM policy mishaps: Case 1 - S3IAM policy mishaps: Intro to IAM
unicrons.cloud
June 22, 2024 at 3:57 PM
We have just enabled the RSS feed on our blog. You can subscribe here: https://unicrons.cloud/en/feed.xml
Extra bit we didn't include in the post: The source roles are included under the `aws:PrincipalArn` condition to avoid losing access if we recreate the roles. Why don't add them as `Principal`?
June 16, 2024 at 12:21 PM
Extra bit we didn't include in the post: The source roles are included under the `aws:PrincipalArn` condition to avoid losing access if we recreate the roles. Why don't add them as `Principal`?
It's been a while but the new episode of our IAM series is out! Let's talk about S3:
https://unicrons.cloud/en/2024/06/01/iam-policy-mishaps-case-1---s3/
https://unicrons.cloud/en/2024/06/01/iam-policy-mishaps-case-1---s3/
IAM policy mishaps: Case 1 - S3 - unicrons.cloud
unicrons.cloud
June 1, 2024 at 3:27 PM
It's been a while but the new episode of our IAM series is out! Let's talk about S3:
https://unicrons.cloud/en/2024/06/01/iam-policy-mishaps-case-1---s3/
https://unicrons.cloud/en/2024/06/01/iam-policy-mishaps-case-1---s3/
También puedes leerlo en Español aquí
unicrons.cloud/es/2024/02/2...
unicrons.cloud/es/2024/02/2...
We just launched unicrons.cloud. Check out our first blog post! IAM intro from our Sh3llCON talk, first episode of the series. unicrons.cloud/en/2024/02/2...
IAM policy mishaps: Intro to IAM - unicrons.cloud
unicrons.cloud
February 23, 2024 at 2:25 PM
También puedes leerlo en Español aquí
unicrons.cloud/es/2024/02/2...
unicrons.cloud/es/2024/02/2...
We just launched unicrons.cloud. Check out our first blog post! IAM intro from our Sh3llCON talk, first episode of the series. unicrons.cloud/en/2024/02/2...
IAM policy mishaps: Intro to IAM - unicrons.cloud
unicrons.cloud
February 23, 2024 at 1:49 PM
We just launched unicrons.cloud. Check out our first blog post! IAM intro from our Sh3llCON talk, first episode of the series. unicrons.cloud/en/2024/02/2...