A-Salt: attacking SaltStack

Found SaltStack on a network and don't know how to attack the thing? Check out how a few configuration issues and a new spin on Jinja template injections can undo a network managed by Salt.

  <img alt="post featured image" src="https://skylightcyber.comhttps://skylightcyber.com/2023/02/09/a-salt-attacking-saltstack/saltshaker.jpg" />
  <h1><a href="https://skylightcyber.com/#TL-DR" rel="noreferrer" target="_blank" title="TL;DR"></a>TL;DR</h1><p>SaltStack is an IT orchestration platform, similar to Puppet or Ansible. This blog post introduces a set of common misconfigurations we’ve encountered in the wild, as well as a novel template injection technique that can …

attack attackers cheatsheet check configuration defenders don managed network orchestration salt saltstack spin template what is