Attacking and Defending Infrastructure with Terraform...

Mike Ruth • Francisco Oca - Attacking and Defending Infrastructure with Terraform: How we got admin across cloud environments In this talk we'll demonstrate how to attack Terraform Enterprise and Terraform Cloud to exfiltrate secrets and deploy mali...

Mike Ruth • Francisco Oca - Attacking and Defending Infrastructure with Terraform: How we got admin across cloud environments

In this talk we'll demonstrate how to attack Terraform Enterprise and Terraform Cloud to exfiltrate secrets and deploy malicious applications and infrastructure into production cloud environments undetected. Then we'll show you how we worked with HashiCorp to best mitigate it.

Sched: https://bsidessf2022.sched.com/event/rjqo/attacking-and-defending-infrastructure-with-terraform-how-we-got-admin-across-cloud-environments