Abusing Identity Providers in AWS

A blog post I wrote for the Pwned Labs platform that covers how to abuse a GitLab OIDC Identity Provider to gain privilege escalation in AWS.

Last updated