Sowing Chaos and Reaping Rewards in Confluence and Jira

Introduction

Let me paint a picture for you. You’re on a red team operation, operating from your favorite C2, and have just landed on a user’s workstation. You decide to take a look at their DNS cache to get a list of internal resources the user has been browsing and as you look through the list, there are several that you recognize based on naming conventions. One in particular might be interesting: Atlassian. What do you do next? Do …

atlassian browsing cache chaos confluence dns hacking internal introduction jira list red team research resources rewards social engineering team workstation