3 ms·
The security research team at Ronin did a brief technical analysis of AWS CloudShell. We found that one can access other attached block devices and escape to th
by dehydr8 3y ago
The security research team at Ronin did a brief technical analysis of AWS CloudShell. We found that one can access other attached block devices and escape to the parent containers and the underlying Firecracker microVM (not the underlying host).
It is similar to escaping the GCP CloudShell using the exposed docker socket. SpenGietz: https://twitter.com/SpenGietz/status/1166752505889316864 https://twitter.com/SpenGietz/status/1166752505889316864