(securitylabs.datadoghq.com) Introducing Pathrunner: A Modular Offensive Security Framework for AWS IAM Privilege Escalation In brief - This article introduces pathrunner, a modular offensive security framework designed to automate the exploitation of AWS IAM privilege escalation paths to help defenders prioritize and remediate misconfigurations. Technically - This article describes a cloud-native framework that automates AWS IAM identity hopping by importing credentials and executing over 80 exploit modules. It features a modular payload system to bypass SCPs or network restrictions, an integrated 'attacker infrastructure' manager for deploying EC2-based listeners and C2 nodes, and a reporting tool that maps actions to expected AWS CloudTrail events for blue team audit log validation. Source: https://securitylabs.datadoghq.com/articles/introducing-pathrunner-aws-privilege-escalation-framework/ #Cybersecurity