<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://0x13hrafnulf.github.io//posts/ums/</loc>
<lastmod>2024-11-25T15:57:53+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/cheesheets/</loc>
<lastmod>2026-03-20T14:08:44+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/training/</loc>
<lastmod>2026-03-14T19:18:46+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/baby/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/baby2/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/breach/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/build/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/data/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/delegate/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/down/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/escape/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/feedback/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/forgotten/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/job/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/lock/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/manage/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/media/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/redelegate/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/retro/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/retro2/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/sendai/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/sweep/</loc>
<lastmod>2025-01-29T17:36:12+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/sync/</loc>
<lastmod>2025-01-08T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/heron/</loc>
<lastmod>2025-01-13T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/hybrid/</loc>
<lastmod>2025-01-28T14:27:17+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/intercept/</loc>
<lastmod>2025-01-13T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/lustrous/</loc>
<lastmod>2025-02-13T18:39:03+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/mythical/</loc>
<lastmod>2025-01-13T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/puppet/</loc>
<lastmod>2025-01-13T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/push/</loc>
<lastmod>2025-01-13T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/reflection/</loc>
<lastmod>2025-01-13T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/sidecar/</loc>
<lastmod>2025-01-13T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/tea/</loc>
<lastmod>2025-01-13T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/tengu/</loc>
<lastmod>2025-01-29T17:33:08+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/trusted/</loc>
<lastmod>2025-01-13T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/cicada/</loc>
<lastmod>2025-03-28T20:29:28+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/shibuya/</loc>
<lastmod>2025-02-24T17:45:58+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/control/</loc>
<lastmod>2025-03-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/unintended/</loc>
<lastmod>2025-03-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/bamboo/</loc>
<lastmod>2025-05-13T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/bruno/</loc>
<lastmod>2025-05-22T17:31:29+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/slonik/</loc>
<lastmod>2025-05-13T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/unchained/</loc>
<lastmod>2025-05-13T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/kaiju/</loc>
<lastmod>2025-06-09T19:22:35+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/vigilant/</loc>
<lastmod>2025-06-01T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/klendathu/</loc>
<lastmod>2025-06-15T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/abuse-openid-connect-and-gitlab-for-aws-access/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/assume-privileged-role-with-external-id/</loc>
<lastmod>2025-10-12T18:11:29+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/aws-s3-enumeration-basics/</loc>
<lastmod>2025-09-23T18:43:15+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/bypass-restrictions-in-api-gateway/</loc>
<lastmod>2025-09-06T17:45:11+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/escalate-privileges-by-iam-policy-rollback/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/exploit-jenkins-in-the-cloud/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/hunt-for-secrets-in-git-repos/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/identify-iam-breaches-with-cloudtrail-and-athena/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/identify-the-aws-account-id-from-a-public-s3-bucket/</loc>
<lastmod>2025-10-21T18:57:18+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/intro-to-aws-iam-enumeration/</loc>
<lastmod>2025-09-23T18:43:15+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/loot-public-ebs-snapshots/</loc>
<lastmod>2025-08-16T17:34:27+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/prevent-breaches-with-aws-iam-access-analyzer/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/pwn-teamcity-in-the-cloud/</loc>
<lastmod>2025-09-24T21:16:28+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/ssrf-to-pwned/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/unauthenticated-aws-iam-principals-enumeration/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/abuse-dynamic-groups-in-entra-id-for-privilege-escalation/</loc>
<lastmod>2025-09-23T18:43:15+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/azure-blob-container-to-initial-access/</loc>
<lastmod>2025-09-23T18:43:15+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/azure-recon-to-foothold-and-profit/</loc>
<lastmod>2025-09-23T18:43:15+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/bypass-azure-mfa-with-evilginx/</loc>
<lastmod>2025-09-24T21:14:33+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/bypass-azure-web-app-authentication-with-path-traversal/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/execute-azure-credential-shuffle-to-achieve-objectives/</loc>
<lastmod>2025-09-23T18:43:15+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/exploit-sql-injection-in-azure-function-app/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/intro-to-azurerecon-with-bloodhound/</loc>
<lastmod>2025-10-19T19:43:09+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/leverage-device-code-phishing-for-initial-access/</loc>
<lastmod>2025-09-23T18:43:15+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/loot-exchange-teams-and-sharepoint-with-graphrunner/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/passwordless-credentials-for-access-and-escalation/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/phished-for-initial-access/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/unlock-access-with-azure-key-vault/</loc>
<lastmod>2025-09-16T20:04:08+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/unmask-privileged-access-in-azure/</loc>
<lastmod>2025-09-16T20:04:08+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/escalate-gcp-privileges-with-implicit-delegation/</loc>
<lastmod>2025-09-16T09:55:54+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/exploit-ssrf-with-gopher-for-gcp-initial-access/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/gain-entry-to-gcp-via-gitlab-commit/</loc>
<lastmod>2025-08-19T19:11:35+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/illuminate-gcp-by-fuzzing-iam-permissions/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/impersonate-gcp-service-account-for-privileged-access/</loc>
<lastmod>2025-10-04T15:33:56+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/infiltrate-gcp-via-webapp-exploitation/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/leverage-google-workspace-for-gcp-resource-access/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/pivot-through-service-accounts-using-dangerous-permissions/</loc>
<lastmod>2025-08-04T00:00:00+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//posts/reveal-hidden-files-in-google-storage/</loc>
<lastmod>2025-08-09T21:30:58+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//categories/</loc>
<lastmod>2026-03-20T14:19:25+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//tags/</loc>
<lastmod>2026-03-20T14:19:25+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//archives/</loc>
<lastmod>2026-03-20T14:19:25+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//misc/</loc>
<lastmod>2026-03-20T14:19:25+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//about/</loc>
<lastmod>2026-03-20T14:19:25+00:00</lastmod>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//tags/projects/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//tags/cheetsheet/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//tags/other/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//tags/vulnlab-boxes/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//tags/active-directory/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//tags/red-teaming/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//tags/vulnlab-chains/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//tags/pwnedlabs/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//tags/aws/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//tags/cloud/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//tags/azure/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//tags/gcp/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//categories/projects/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//categories/cheetsheets/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//categories/other/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//categories/vulnlab-boxes/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//categories/active-directory/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//categories/red-teaming/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//categories/vulnlab-chains/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//categories/pwned-labs/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//categories/aws/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//categories/azure/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//categories/gcp/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//page2/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//page3/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//page4/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//page5/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//page6/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//page7/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//page8/</loc>
</url>
<url>
<loc>https://0x13hrafnulf.github.io//page9/</loc>
</url>
</urlset>
