Record · corpus.blog/posts/01a08745-ac61-700f-aecc-578b573c8fcf

The New PKCE Authentication in AWS SSO Brings Hope (Mostly)

blog.christophetd.fr · published 28 November 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.christophetd.fr Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 25
Words captured: 1,220

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

Phishing for AWS credentials via AWS SSO device code authentication (updated 2024) Read at the source ↗

blog.christophetd.fr

Introducing a new phishing technique for compromising Office 365 accounts Read at the source ↗

aadinternals.com

https://www.ruse.tech/blogs/aws-sso-phishing

ruse.tech

https://github.com/sebastian-mora/awsssome_phish

github.com

https://towardsaws.com/mitming-aws-iam-identity-center-oidc-authentication-d60af925270

towardsaws.com

https://mjg59.dreamwidth.org/62175.html

mjg59.dreamwidth.org

https://ramimac.me/aws-device-auth

ramimac.me

https://www.commonfate.io/blog/granted-mitigates-aws-phishing?utm_campaign=granted-landing-page-banner

commonfate.io

https://aws.amazon.com/blogs/developer/aws-cli-adds-pkce-based-authorization-for-sso/

aws.amazon.com

https://blog.christophetd.fr/wp-content/uploads/2024/11/image.png

blog.christophetd.fr

https://blog.christophetd.fr/wp-content/uploads/2024/11/pkce-1.png

blog.christophetd.fr

https://blog.christophetd.fr/wp-content/uploads/2024/11/image-7.png

blog.christophetd.fr

https://github.com/aws/aws-cli/pull/8947/files

github.com

https://github.com/aws/aws-cli/blob/3c53a0cd5809fe7af974ace3ac60b3b1ea791055/awscli/botocore/utils.py

github.com

https://www.google.com/search?q=site%3Ahackerone.com+inurl%3A%2Freports%2F+%28%22oauth%22+OR+%22oauth2%22%29+%28%22token%22+OR+%22code%22%29+%28%22redirect+URL%22+OR+%22redirect+URI%22%29&sca_esv=a1ee5fe5eb1b2aeb&ei=wO5IZ6D_I8Cci-gPhsj0MA&ved=0ahUKEwig38joiYCKAxVAzgIHHQYkHQYQ4dUDCA8&uact=5&oq=site%3Ahackerone.com+inurl%3A%2Freports%2F+%28%22oauth%22+OR+%22oauth2%22%29+%28%22token%22+OR+%22code%22%29+%28%22redirect+URL%22+OR+%22redirect+URI%22%29&gs_lp=Egxnd3Mtd2l6LXNlcnAib3NpdGU6aGFja2Vyb25lLmNvbSBpbnVybDovcmVwb3J0cy8gKCJvYXV0aCIgT1IgIm9hdXRoMiIpICgidG9rZW4iIE9SICJjb2RlIikgKCJyZWRpcmVjdCBVUkwiIE9SICJyZWRpcmVjdCBVUkkiKUj-3gFQmQVYy9sBcAR4AJABAJgBVqABpxqqAQI1N7gBA8gBAPgBAZgCAKACAJgDAIgGAZIHAKAHhRQ&sclient=gws-wiz-serp

google.com

https://blog.christophetd.fr/wp-content/uploads/2024/11/image-1.png

blog.christophetd.fr

https://hackerone.com/amazon-web-services?type=team

hackerone.com

https://blog.christophetd.fr/wp-content/uploads/2024/11/image-2.png

blog.christophetd.fr

https://github.com/99designs/aws-vault/pull/1258

github.com

https://blog.christophetd.fr/wp-content/uploads/2024/11/image-3.png

blog.christophetd.fr

https://www.linkedin.com/in/christophetafanidereeper/

linkedin.com

https://bsky.app/profile/christophetd.fr

bsky.app

https://aws.amazon.com/blogs/developer/aws-cli-adds-pkce-based-authorization-for-sso

aws.amazon.com

https://aws.amazon.com/about-aws/whats-new/2024/11/aws-command-line-interface-pkce-single-sign-on

aws.amazon.com

https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html

docs.aws.amazon.com