AWS:
Exploitation
Guides on OIDC trust abuse and SSRF-based IMDS credential theft in AWS
OIDC Federation Abuse
Exploit trust relationships in OIDC federation to assume IAM roles via manipulated identity tokens, bypassing traditional credential-based authentication in AWS.
AWS exploitation leverages confirmed weaknesses to gain access, extract data, or execute code. SSRF to the instance metadata service (169.254.169.254) remains one of the most common entry points, yielding IAM role credentials from EC2 and Lambda environments.
IAM privilege abuse uses overly permissive policies to perform actions beyond intended scope. Lambda exploitation targets functions with injectable event data or environment variables containing secrets. Misconfigured S3 buckets expose sensitive data or accept arbitrary uploads that can be served to other users.