You are on the public demo. All data is seeded, minor inconsistencies are expected.Contact us

Toxic Combinations

14 attack paths

				Resources
98	CRITICAL	RDS publicly exposed with default admin password	Exposure	1 resource
97	CRITICAL	Public VM with critical CVE leaks DB credentials to a PII database	Exposure	2 resources
96	CRITICAL	Internet to PII database via assumed role and cross-account snapshot	Exposure	3 resources
95	CRITICAL	Internet-exposed VM with vulnerable Log4j -> DB with PII	Exposure	2 resources
94	CRITICAL	Internet-reachable Kapsule API server with privileged containers	toxic-combo	1 resource
93	CRITICAL	Internet-reachable OKS API server with privileged containers	toxic-combo	1 resource
92	CRITICAL	Public bucket contains valid AWS access keys	Data Access	1 resource
84	HIGH	MKS API server without IP restriction on a cluster outside any private network	toxic-combo	1 resource
82	HIGH	Internet-reachable Kapsule API server on an outdated control plane	toxic-combo	1 resource
80	HIGH	Pod with NET_ADMIN can pivot to cluster-admin role	Privilege Escalation	1 resource
78	HIGH	Cross-cloud admin identity without MFA	Privilege Escalation	2 resources
72	HIGH	Internet-facing function reads sensitive bucket	Exposure	2 resources
68	HIGH	Snapshot with PII shared with another account	Data Access	1 resource
48	MEDIUM	Lateral movement: shared SSH key reused across staging and prod	lateral_movement	2 resources

Loading filters...