Pwned Labs Blog

Recent Articles

Azure, Red Team, Privilege Escalation, Lateral Movement

Join us in this new blog post as we explore the various methods that threat actors commonly use to move laterally and...

Azure, Red Team, initial access

Join us in this blog post as we explore various methods that threat actors commonly use to gain initial access to Azure.

Red Team, GCP, cloud build

In this blog post, we will explore how to exploit Cloud Build to escalate privileges and achieve lateral movement in a...

Red Team, AWS, snapshot

This is the second in a series of walkthroughs for the Thunderdome multi-cloud Cyber Range from Pwned Labs. This post...

Red Team, AWS, bitbucket

This is the first in a series of walkthroughs for the Thunderdome multi-cloud Cyber Range from Pwned Labs. This post...

Azure, Red Team, SQL

Azure SQL Managed Instance (and also Azure SQL Server) suffer from insufficient validation of the LOCATION parameter of...

Red Team, AWS, OIDC

Join us on a ride-along pentest of AWS and GitLab! Huge Logistics has hired us to perform a security assessment of...

Azure, Red Team, VM

Join us as we dive into Azure Virtual Machine (VM) security from a red team perspective, focusing on identifying and...