Medium - A Technical Analysis of the Capital One Hack

18 Aug 2019 in Trend

원문 - CloudSploit

Trend 파악을 Medium 기고문 요약 포스팅 - 캐피탈 카드원 해킹 사례의 기술적 분석

This Keeps Happening

Gaining a Foothold

Server-Side Request Forgery

The AWS Metadata Service

Elevating Access

Putting it All Together

What Went Wrong?

What Went Right?

Protecting Yourself

Conclusion

Summary