Raining shells in AWS by chaining vulnerabilities - OWASP Bay Area Meetup August 12, 2019 in cloud, aws, penetration testing, offsec Slides of my talk on using mis-configurations, overtly permissive IAM policies and application security vulnerabilities to get shells in AWS EC2 instances and go beyond the plane of attack. Presented at OWASP Bay Area August 2019 meetup. Continue reading