corpus.blog
44,124 blogs · 5,475,563 posts Claim your blog
Record · corpus.blog/posts/01a08745-ac63-729c-a65a-9eb302161739

MitM at the Edge: Abusing Cloudflare Workers

blog.christophetd.fr · published 28 June 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.christophetd.fr Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
25
Words captured
1,721

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/christophetd/abusing-cloudflare-workers
github.com
https://developers.cloudflare.com/cloudflare-one/applications/configure-apps/dash-sso-apps/
developers.cloudflare.com
https://www.cloudflare.com/press-releases/2022/cloudflare-announces-first-quarter-2022-financial-results/
cloudflare.com
https://web.archive.org/web/20211202160431/https://community.cloudflare.com/t/someone-else-can-create-an-account-and-api-token-on-your-email-address/309492/5
web.archive.org
https://blog.cloudflare.com/incident-report-on-memory-leak-caused-by-cloudflare-parser-bug/
blog.cloudflare.com
https://developers.cloudflare.com/workers/wrangler/get-started/
developers.cloudflare.com
https://badger.com/technical-post-mortem
badger.com
http://app.badger.com
app.badger.com
https://blog.sucuri.net/2020/02/abused-cloudflare-workers-service-used-to-inject-korean-seo-spam.html
blog.sucuri.net
https://developers.cloudflare.com/fundamentals/get-started/basic-tasks/account-security/review-audit-logs/
developers.cloudflare.com
https://developers.cloudflare.com/logs/about/
developers.cloudflare.com
https://api.cloudflare.com/
api.cloudflare.com
https://www.zscaler.com/blogs/security-research/cloudfall-targets-researchers-and-scientists-invited-international-military
zscaler.com
https://www.bleepingcomputer.com/news/security/blackwater-malware-abuses-cloudflare-workers-for-c2-communication/
bleepingcomputer.com
https://www.bleepingcomputer.com/news/security/astaroth-trojan-uses-cloudflare-workers-to-bypass-av-software/
bleepingcomputer.com
https://www.mandiant.com/resources/apt41-us-state-governments
mandiant.com
https://www.welivesecurity.com/2021/08/24/sidewalk-may-be-as-dangerous-as-crosswalk/
welivesecurity.com
https://urlscan.io/result/f909df28-00b7-4842-ac4c-2e0e7ada1bd4/
urlscan.io
https://urlscan.io/result/6951153b-cb16-416e-a3e5-4389359a759f/
urlscan.io
https://www.bleepingcomputer.com/news/security/phishing-campaign-uses-upscom-xss-vuln-to-distribute-malware/
bleepingcomputer.com
https://community.cloudflare.com/t/woker-dev-phishing-attempts/135908/12
community.cloudflare.com
https://twitter.com/silentpush_labs/status/1534233729048223744
twitter.com
https://twitter.com/PhishStats/status/1463572553298030596
twitter.com
https://urlscan.io/result/200b9543-79c4-44bf-96dd-733a613fc4a9/
urlscan.io
https://twitter.com/christophetd
twitter.com
Elsewhere on blog.christophetd.fr (8)