Series

シリーズ

Eight targets. Pick one and read it in order.

AWS

IAM paths, role chaining and the quiet ways an account gets walked.

Entra ID, service principals and subscription-level pivots.

Projects, service accounts and the metadata server.

From a pod to the cluster: RBAC, tokens and the node boundary.

Runners, pipelines and the secrets they carry.

Classic domain attack paths, written for a hybrid world.

Models, guardrails and the systems wrapped around them.

Tool access, MCP servers and what an agent is trusted to do.