AWS Network Firewall checks SNI and Host headers but never verifies the actual destination IP. Attackers can bypass egress filtering by spoofing legitimate domains while routing traffic to malicious IPs.
buff.lyAWS Network Firewall Egress Filtering Bypass - Hacking The CloudBypass AWS Network Firewall Egress Filtering using SNI spoofing and Host Header manipulation.
0 reposts1 like