An EC2 foothold can get weird fast. This post shows how SSM Agent traffic can be spoofed: race the real agent for EC2 Messages, force Success, or open your own SSM Sessions control channel.
buff.lyIntercept SSM Communications - Hacking The CloudWith access to an EC2 instance you can intercept, modify, and spoof SSM communications.
0 reposts0 likes