Chen Shiri
Cyber Security Researcher, Accenture Security
Tel Aviv, Israel
Actions
Chen Shiri is a cyber security researcher, hacker, known for his research on low-level security and isolation mechanisms. His research has revealed significant flaws within widely-used services and prominent vendors. In addition to its research on Accenture, he published research with early examples of weaknesses in microservices and container-based web apps.
Links
Badges
Area of Expertise
Topics
The Unseen Secrets of the Cloud and How They Surface
This talk introduces a new way of detecting secrets in cloud environments that directly enables privilege escalation and large-scale cloud compromise.
The session reveals how secrets systematically surface across AWS, Azure, and GCP due to architectural design choices and a system-level lack of sanitization by default. While centralized logging systems are a major focus, the research goes beyond logging to cover multiple cloud-native surfaces where credentials emerge, including containers, virtual machines, serverless functions, managed services, and control-plane components.
The talk explains how attackers can abuse default access to logs from resources and telemetry after an initial foothold, why cloud-native logging architectures amplify blast radius, and how unsanitized secrets propagate across services. Attendees will see how secrets discovered through these techniques can be chained into lateral movement, privilege escalation, persistence, and full cloud compromise.
NeuroInvasion Penetrating the Core of Artificial Intelligence
This presentation delves into my new research and methodologies for attacking Deep Neural Networks (DNNs) and AI models in black-box environments (without access to internal parameters.).
Traditionally, adversarial attacks require access to the model's internals (white-box access), limiting their application in black-box settings. However, this talk introduces **two innovative techniques** to bypass this restriction. Attendees will gain a deep understanding of how these techniques work, from identifying a model’s architecture through **model enumeration** to adapting **white-box attack strategies** for black-box models.
1. **Model Enumeration** techniques– using prompts, API probing, and output analysis to identify the architecture and behavior of black-box models.
2. New technique 1- Substitute Model Attacks: How to train and use a substitute model to apply white-box adversarial techniques on black-box systems.
3. New technique 2- Methods to exploit AI models based on open-source frameworks like GPT by targeting known vulnerabilities
I will also provide practical demonstrations of how **white-box attacks** and other real world vulnerabilities widely deployed AI applications. can be adapted to black-box models once the discussed techniques were utilized, with **a live demo**
The presentation demystifies these attacks, making them accessible to security professionals without requiring deep mathematical expertise.
NeuroInvasion Penetrating the Core of Artificial Intelligence
This presentation delves into my new research and methodologies for attacking Deep Neural Networks (DNNs) and AI models in black-box environments (without access to internal parameters.).
Traditionally, adversarial attacks require access to the model's internals (white-box access), limiting their application in black-box settings. However, this talk introduces **two innovative techniques** to bypass this restriction. Attendees will gain a deep understanding of how these techniques work, from identifying a model’s architecture through **model enumeration** to adapting **white-box attack strategies** for black-box models.
1. **Model Enumeration** techniques– using prompts, API probing, and output analysis to identify the architecture and behavior of black-box models.
2. New technique 1- Substitute Model Attacks: How to train and use a substitute model to apply white-box adversarial techniques on black-box systems.
3. New technique 2- Methods to exploit AI models based on open-source frameworks like GPT by targeting known vulnerabilities
I will also provide practical demonstrations of how **white-box attacks** and other real world vulnerabilities widely deployed AI applications. can be adapted to black-box models once the discussed techniques were utilized, with **a live demo** and mitigations to defend against this attacks.
The presentation demystifies these attacks, making them accessible to security professionals without requiring deep mathematical expertise.
"I Own your Cluster" -Taking over AWS Kubernetes clusters with Chain Attack
This presentation explores groundbreaking research revealing critical vulnerabilities within AWS Kubernetes environments. In this session, we will examine two security issues discovered that have the potential to impact thousands of Kubernetes clusters hosted on AWS, posing significant security risks. Additionally, attendees will learn about the sophisticated attack methodology developed specifically for AWS Kubernetes, detailing a chain attack capable of taking over Kubernetes nodes and clusters, resulting in unauthorized access and potential data compromise.
We will delve into techniques attackers use to bypass security controls, breach secured pods, and gain privileged access to Kubernetes APIs. Furthermore, the session provides an in-depth analysis of AWS Kubernetes architecture to illustrate critical components that enable these attacks. Attendees will leave with a clear understanding of the attack mechanics and specific exploitation strategies involving AWS cloud infrastructure.
"I Own your Cluster" -Taking over AWS EKS cluster with Chain Attack
This presentation explores a research that reveals serious flaws in the AWS Elastic Kubernetes Service (EKS). We will examine two security issues in this session that could affect thousands of EKS clusters and pose serious security risks and the attack methodology I have developed for this service. Will talk about a chain attack that takes advantage of these flaws to take over K8s node and clusters, exposing the risk of unauthorized access and data compromise in Kubernetes environments on AWS.
In this session, we'll talk about how attackers with restricted access can bypass security measures, breach secured pods, and access privileged KubeAPI.
After that, we will analyze the AWS EKS architecture to highlight the vital parts that enable these attacks. You will learn about the intricacies of the attack chain and how it takes advantage of the AWS cloud infrastructure.
"I Own your Cluster" -Taking over AWS EKS cluster with Chain Attack
### Abstract
This presentation explores a research that reveals serious flaws in the AWS Elastic Kubernetes Service (EKS). We will examine two security issues in this session that could affect thousands of EKS clusters and pose serious security risks and the attack methodology I have developed for this service. Will talk about a chain attack that takes advantage of these flaws to take over K8s node and clusters, exposing the risk of unauthorized access and data compromise in Kubernetes environments on AWS.
In this session, we'll talk about how attackers with restricted access can bypass security measures, breach secured pods, and access privileged KubeAPI.
After that, we will analyze the AWS EKS architecture to highlight the vital parts that enable these attacks. You will learn about the intricacies of the attack chain and how it takes advantage of the AWS cloud infrastructure.
### Presentation Description
In this revealing session, Chen Shiri presents new research exposing high risk security issues within AWS Elastic Kubernetes Service (EKS). Titled "AWS Chain Attack - Thousands of Vulnerable EKS Clusters," this research identifies two zero-day vulnerabilities that compromise the fundamental pod isolation mechanisms in AWS EKS. These vulnerabilities grant attackers with limited initial access the capability to bypass existing security controls, directly interacting with privileged Kubernetes APIs and risking exposure of sensitive data.
Attendees will gain an in-depth understanding of:
• Critical Vulnerabilities: Detailed analysis of two zero-day vulnerabilities allowing attackers to breach pod isolation and escalate privileges.
• Implications: Comprehensive examination of the severe potential impacts, including unauthorized data access, regulatory non-compliance, financial damages, and reputational harm to affected organizations.
• Chain Attack Methodology: Introduction to an innovative attack methodology leveraging AWS instance metadata, Kubernetes functionalities, and AWS-specific mechanisms to infiltrate and control entire clusters and connected cloud resources.
• Live Proof-of-Concept Demonstration: Presentation of a compelling live demo illustrating the step-by-step execution and severity of this attack, reinforcing the urgency for immediate remediation.
Technical Deep-Dive Includes:
• Instance Metadata Exploitation: Techniques for leveraging EC2 instance metadata, exploiting VM roles accessible via Kubernetes containers to obtain sensitive cloud environment details and temporary tokens.
• Kube-Config Manipulation: Methodology for generating malicious Kube-Config files to interact with and exploit Kubernetes APIs, uncovering internal cluster structures and configurations.
Pod Access and Container Breakout: Strategies to circumvent Role-Based Access Control (RBAC), enabling attackers to escalate from compromised containers to node-level access, fully exposing all containers, secrets, and authentication credentials.
"I Own your Cluster" -Taking over AWS clusters using Chain Attack
In this talk, we explore my research into AWS Elastic Kubernetes Service (EKS) that identifies critical vulnerabilities in the service. The talk will focus on two significant security flaws that pose considerable risks to thousands of EKS clusters. We'll delve into a sophisticated chain attack methodology I've developed, which exploits these vulnerabilities to take over Kubernetes nodes and clusters. This attack exposes the risk of unauthorized access and data compromise within Kubernetes environments on AWS.
The session will detail how attackers, even with restricted permissions, can bypass existing security measures, breach secured pods, and gain access to the privileged KubeAPI. We will also dissect the AWS EKS architecture, pinpointing the crucial components that facilitate these attacks, thus providing attendees with a deep understanding of the attack chain's intricacies and its leverage over AWS cloud infrastructure.
Session Details:
The talk offers critical insights into a significant cybersecurity challenge affecting AWS Elastic Kubernetes Service (EKS). My research reveals two zero-day vulnerabilities that compromise the pod isolation mechanism, potentially impacting numerous organizations.
Key Findings from the Talk:
1. Critical Vulnerabilities: We identify two zero-day vulnerabilities within AWS EKS that allow attackers with limited access to bypass security measures and gain access to privileged KubeAPI and the cluster data.
2. Chain Attack Methodology: The chain attack methodology developed for this research leverages the vulnerabilities to showcase a systemic failure within AWS EKS security. It utilizes instance metadata, Kubernetes capabilities, and AWS mechanisms to gain comprehensive control over entire clusters.
3. Implications: The vulnerabilities discussed carry severe consequences, potentially leading to unauthorized access to sensitive information.
4. Proof of Concept: A live proof of concept video is included in the talk, which clearly demonstrates the execution of the attack, emphasizing the critical need for immediate remediation of these vulnerabilities.
Technical Details:
• Instance Metadata Exploitation: The attack exploits instance metadata by querying data from the EC2 VM Role, which is accessible from containers within the Kubernetes environment. Through this, an attacker obtains a temporary token and gains access to extensive information about the cloud environment, including ARNs, networking details, and instance-specific data.
• Kube-Config Manipulation: By manipulating Kube-Config files, the attacker retrieves and uses information that grants unauthorized access to the Kubernetes cluster, facilitating interaction with the Kubernetes API and providing detailed insights into the cluster's structure.
• Pod Access and Breakout: Successfully breaching pod security, the attacker implements a breakout strategy, gaining access to the node and subsequently to all containers, their data, secrets, and authentication credentials.
INTENT 2025 Sessionize Event
BSides Colorado Springs 2025 Sessionize Event
BSides Cleveland 2025 Sessionize Event
BsidesNoVa 2025 Sessionize Event
BSides Kraków 2025 Sessionize Event
Cybersecurity & Ransomware Live! VirtCon Sessionize Event
HackGDL 2025 Sessionize Event
Austin Kubernetes Meetup User group Sessionize Event
BSidesTLV 2024 Sessionize Event
Chen Shiri
Cyber Security Researcher, Accenture Security
Tel Aviv, Israel
Links
Actions
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top