The Grey Corner

Introduction In Kubernetes environments using Istio you have the option of delegating access control decisions to a custom application, rather than relying solely on Istio’s built-in Role-Based Access Control (RBAC).

Introduction Last weekend, I presented at BSides Canberra on the topic of abusing native cloud services for Command and Control (C2).

Heres the third entry in my series on abusing AWS services to provide C2 high reputation redirectors.

Back in July this year I released the fourth and (I thought) final entry in my series on exploiting Azure native services to provide high reputation C2 redirectors.

Heres a second entry in my series on abusing AWS services to provide high reputation redirectors for Command and Control.

Heres the final (for now at least) entry in my series on abusing Azure services to provide high reputation redirectors for Command and Control.

Another quick entry in my ongoing series where I find ways to use cloud native services to receive command and control traffic - Azure edition.

Here is another entry in my ongoing series of posts where I find ways to abuse cloud native services for fronting C2 implant traffic.

As Ive been playing with Azure on and off over the last few weeks trying to find native services abusable for C2 fronting, I’ve developed a need to quickly setup and tear down POC C2 environments so I can avoid being billed for cloud resources during idle…

This is a continuation of an ongoing series of blog posts I have made on the topic of using cloud provider native services to provide high reputation redirectors for command and control HTTP/S implant traffic.