Tools we build and flaws we find.

We build tooling to study how cloud and application infrastructure behaves under attack, and disclose the vulnerabilities we find along the way.

Tools

Noctaxris
Local AWS, GCP and Azure emulators for cloud security labs. Reproduce service behaviour offline and build repeatable attack scenarios against each provider.
AWS GCP Azure

Findings

Unauthenticated ECS host bind-mount to Docker-host RCE / container escape in floci-io/floci
An unauthenticated ECS RegisterTaskDefinition plus RunTask bind-mounts the Docker host filesystem read-write into an attacker container and runs commands as root on the host.
Critical 10.0