This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Nick Frichette
frichetten.com
did:plc:ky53e7rwx6nsoemge2ju5kpd
Cloud defenders! It's worth knowing that GetCallerIdentity is unnecessary in an intrusion. Threat actors can just as easily invoke an API call that doesn't log to CloudTrail and see in the resulting error message what principal they are using.
https://unit42.paloaltonetworks.com/javaghost-cloud-phishing/
2025-03-03T15:10:17.251Z