Cloud Security GCP Service Account Impersonation and Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Impersonation
Cloud Security 
Windows Privesc Windows Access Tokens Deep Dive: Integrity Levels and Privileges
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Windows Privesc Named Pipe Impersonation: How Windows getsystem Really Works
A deep dive into ImpersonateNamedPipeClient and how named pipe impersonation powers Meterpreter's getsystem.
Cloud Security GCP Privilege Escalation: Abusing Service Account Impersonation and IAM Misconfigurations
How attackers abuse actAs, setIamPolicy, and service account impersonation to escalate privileges in Google Cloud, with blue-team defenses.
Cloud Security Attacking AWS STS, AssumeRole, and Cross-Account Trust
How sts:AssumeRole, weak trust policies, and missing ExternalId enable cross-account pivots, plus blue-team detection.