corpus.blog
41,554 blogs · 5,063,431 posts Claim your blog
Record · corpus.blog/posts/01a0878c-3a58-735e-ab4f-d9e723480d14

Sketchy Cheat Sheet - Story of a Cloud Architecture Diagramming Tool gone wrong

jdomeracki.github.io · published 9 November 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at jdomeracki.github.io Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
106
Words captured
5,013

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/priyankavergadia/google-cloud-4-words/blob/master/ADT/ADT%20User%20Guide%20-%20External.pdf
github.com
https://googlecloudcheatsheet.withgoogle.com/architecture
googlecloudcheatsheet.withgoogle.com
https://storage.googleapis.com/sketchy_cheat_sheet/architecture_tool.gif
storage.googleapis.com
https://developers.google.com/identity/gsi/web/guides/overview
developers.google.com
https://twitter.com/pvergadia/status/1725217430547677607
twitter.com
https://cloud.google.com/docs/authentication/token-types
cloud.google.com
https://developers.google.com/identity/protocols/oauth2/scopes
developers.google.com
https://storage.googleapis.com/sketchy_cheat_sheet/misleading_sign_in.png
storage.googleapis.com
https://developers.google.com/workspace/guides/configure-oauth-consent
developers.google.com
https://developers.google.com/identity/protocols/oauth2/web-server
developers.google.com
https://developer.mozilla.org/en-US/docs/Web/API/Window/localStorage
developer.mozilla.org
https://developer.mozilla.org/en-US/docs/Web/API/Window/sessionStorage
developer.mozilla.org
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie
developer.mozilla.org
https://storage.googleapis.com/sketchy_cheat_sheet/access_token_cookie_params.png
storage.googleapis.com
https://storage.googleapis.com/sketchy_cheat_sheet/access_token_scopes.png
storage.googleapis.com
https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest?retiredLocale=pl
developer.mozilla.org
https://owasp.org/www-community/attacks/xss/
owasp.org
https://www.cloudflare.com/en-gb/learning/ddos/glossary/web-application-firewall-waf/
cloudflare.com
https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
developer.mozilla.org
https://github.com/excalidraw
github.com
https://github.com/excalidraw/excalidraw?tab=readme-ov-file
github.com
https://github.com/advisories/GHSA-v7v8-gjv7-ffmr
github.com
https://nvd.nist.gov/vuln/detail/CVE-2023-26140
nvd.nist.gov
https://portswigger.net/web-security/cross-site-scripting/stored
portswigger.net
https://github.com/excalidraw/excalidraw/pull/6728
github.com
https://storage.googleapis.com/sketchy_cheat_sheet/GHSA-v7v8-gjv7-ffmr.png
storage.googleapis.com
https://aszx87410.github.io/beyond-xss/en/ch1/javascript-protocol/
aszx87410.github.io
https://drive.google.com/file/d/15EjPvEuK8FSWO9sL-8M_LmknYotduXoj/preview
drive.google.com
https://www.youtube.com/watch?v=j8CrJv0dTEc
youtube.com
https://labs.detectify.com/security-guidance/login-logout-csrf-time-to-reconsider/
labs.detectify.com
https://cloud.google.com/blog/topics/developers-practitioners/introducing-google-cloud-architecture-diagramming-tool
cloud.google.com
https://storage.googleapis.com/sketchy_cheat_sheet/shareable_links.png
storage.googleapis.com
https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API
developer.mozilla.org
https://portswigger.net/burp/documentation/collaborator
portswigger.net
https://storage.googleapis.com/sketchy_cheat_sheet/burp_collaborator_poc_23_11_2023.png
storage.googleapis.com
https://portswigger.net/web-security/cross-site-scripting/exploiting/lab-stealing-cookies
portswigger.net
https://storage.googleapis.com/sketchy_cheat_sheet/attack_scenario_one.png
storage.googleapis.com
https://youtu.be/IoXiXlCNoXg?list=PL590L5WQmH8dsxxz7ooJAgmijwOz0lh2H&t=700
youtu.be
https://cheatsheetseries.owasp.org/cheatsheets/Cryptographic_Storage_Cheat_Sheet.html
cheatsheetseries.owasp.org
https://firebase.google.com/docs/web/setup
firebase.google.com
https://storage.googleapis.com/sketchy_cheat_sheet/firebase_admin_config.png
storage.googleapis.com
https://storage.googleapis.com/sketchy_cheat_sheet/shared_link_js.png
storage.googleapis.com
https://firebase.google.com/docs/storage
firebase.google.com
https://storage.googleapis.com/sketchy_cheat_sheet/firebase_cloud_storage.png
storage.googleapis.com
https://cloud.google.com/storage/docs/access-control/iam
cloud.google.com
https://cloud.google.com/storage/docs/access-control/lists
cloud.google.com
https://firebase.google.com/docs/rules
firebase.google.com
https://www.youtube.com/@Fireship
youtube.com
https://youtu.be/sw1Uy3zwsLs
youtu.be
https://firebase.google.com/docs/rules/insecure-rules
firebase.google.com
https://firebase.google.com/docs/storage/web/list-files
firebase.google.com
https://storage.googleapis.com/sketchy_cheat_sheet/react_poc_app.png
storage.googleapis.com
https://www.dol.gov/general/ppii
dol.gov
https://www.proofpoint.com/uk/threat-reference/intellectual-property-theft
proofpoint.com
https://storage.googleapis.com/sketchy_cheat_sheet/customer_shared_links.png
storage.googleapis.com
https://storage.googleapis.com/sketchy_cheat_sheet/mitigation_diagram.png
storage.googleapis.com
https://storage.googleapis.com/sketchy_cheat_sheet/attack_diagram_num_2.png
storage.googleapis.com
https://accounts.google.com/o/oauth2/v2/auth/oauthchooseaccount?gsiwebsdk=3&client_id=255437329003-lvuu51v6jt8u43ee3u3r5opb33dk39jp.apps.googleusercontent.com&scope=openid%20profile%20email%20https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcloud-platform&redirect_uri=storagerelay%3A%2F%2Fhttps%2Fgooglecloudcheatsheet.withgoogle.com%3Fid%3Dauth612636&prompt=select_account&response_type=token&include_granted_scopes=true&enable_granular_consent=true&service=lso&o2v=2&theme=mn&ddm=0&flowName=GeneralOAuthFlow
accounts.google.com
https://docs.excalidraw.com/docs/codebase/json-schema
docs.excalidraw.com
https://storage.googleapis.com/sketchy_cheat_sheet/anonymous_object_overwrite.png
storage.googleapis.com
https://cloud.google.com/compute/docs/instance-groups
cloud.google.com
https://cloud.google.com/compute/docs/instances/startup-scripts/linux
cloud.google.com
https://storage.googleapis.com/sketchy_cheat_sheet/resources_data_json_overwritten.png
storage.googleapis.com
https://storage.googleapis.com/sketchy_cheat_sheet/overwritten_value_reflected_on_the_client_side.png
storage.googleapis.com
https://issuetracker.google.com/issues/312687013
issuetracker.google.com
https://issuetracker.google.com/issues/333194226
issuetracker.google.com
https://storage.googleapis.com/sketchy_cheat_sheet/attack_diagram_num_3.png
storage.googleapis.com
https://storage.googleapis.com/sketchy_cheat_sheet/indexed_gerrit_reference.png
storage.googleapis.com
https://twitter.com/fransrosen
twitter.com
https://storage.googleapis.com/sketchy_cheat_sheet/generate_terraform_feature.png
storage.googleapis.com
https://cloud.google.com/storage/docs/access-control/signed-urls
cloud.google.com
https://storage.googleapis.com/sketchy_cheat_sheet/user_generated_terraform_files.png
storage.googleapis.com
https://storage.googleapis.com/sketchy_cheat_sheet/load_architecture.png
storage.googleapis.com
https://www.checkpoint.com/cyber-hub/cyber-security/what-is-gray-box-testing/
checkpoint.com
https://www.checkpoint.com/cyber-hub/cyber-security/what-is-white-box-testing/
checkpoint.com
https://storage.googleapis.com/sketchy_cheat_sheet/whitebox.png
storage.googleapis.com
https://owasp.org/www-community/attacks/Path_Traversal
owasp.org
https://cloud.google.com/storage/docs/xml-api/overview
cloud.google.com
https://cloud.google.com/storage/docs/xml-api/reference-methods
cloud.google.com
https://drive.google.com/file/d/1OG3uQfGv1PBVmiBmt7FeKfx8ZOqEdNMK/preview
drive.google.com
https://alsmola.medium.com/security-invariants-or-gtfo-d7db2950f95
alsmola.medium.com
https://storage.googleapis.com/sketchy_cheat_sheet/go_storage_bucket_traversal.png
storage.googleapis.com
https://github.com/googleapis/google-cloud-go/commit/6b7b21f8a334b6ad3a25e1f66ae1265b4d1f0995
github.com
https://pkg.go.dev/cloud.google.com/go/storage
pkg.go.dev
https://storage.googleapis.com/sketchy_cheat_sheet/attack_scenraio_diagram_num_4.png
storage.googleapis.com
https://thehacksummit.com/en/
thehacksummit.com
https://speakerdeck.com/jdomeracki/sketchy_cheat_sheet
speakerdeck.com
https://www.egnyte.com/
egnyte.com
https://issuetracker.google.com/issues/313685590
issuetracker.google.com
https://issuetracker.google.com/issues/347462501
issuetracker.google.com
https://issuetracker.google.com/issues/349432799
issuetracker.google.com
https://issuetracker.google.com/issues/349831037
issuetracker.google.com
https://youtu.be/AQ-iEqdepA4
youtu.be
https://twitter.com/gregxsunday
twitter.com
https://developer.mozilla.org/en-US/docs/Glossary/SPA
developer.mozilla.org
https://www.checkpoint.com/cyber-hub/cyber-security/what-is-penetration-testing/what-is-black-box-testing/
checkpoint.com
https://cloud.google.com/storage/docs/xml-api/reference-headers
cloud.google.com
https://atc-team.googlesource.com
atc-team.googlesource.com
https://atc-team-review.googlesource.com
atc-team-review.googlesource.com
https://atc-team-review.googlesource.com/c/google-4-words/+/8280/1/hooks/useArchitecture.tsx
atc-team-review.googlesource.com
https://atc-team-review.googlesource.com/c/adt-terraform/+/8220
atc-team-review.googlesource.com
https://www.googlecloudcommunity.com/gc/Tips-Tricks/GCP-Architecture-Diagramming-Tool/td-p/394583
googlecloudcommunity.com
https://arc.net/blog/CVE-2024-45489-incident-response
arc.net
https://kibty.town/blog/arc/
kibty.town
https://gerrit-review.googlesource.com/Documentation/access-control.html
gerrit-review.googlesource.com
https://labs.detectify.com/writeups/bypassing-and-exploiting-bucket-upload-policies-and-signed-urls
labs.detectify.com