4 ms·
AWS CloudShell analysis: exposed block devices and container escape(s)
- dehydr8 3y agoThe security research team at Ronin did a brief technical analysis of AWS CloudShell. We found that one can access other attached block devices and escape to the parent containers and the underlying Firecracker microVM (not the underlying host). It is similar to escaping the GCP CloudShell using the exposed docker socket. SpenGietz: https://twitter.com/SpenGietz/status/1166752505889316864 https://twitter.com/SpenGietz/status/1166752505889316864