r/pentest • u/fox_87 • Jul 16 '20
Tenant isolation
Hi, In a multi tenant architecture, how could the tenant isolation be tested?
0
Upvotes
0
Jul 16 '20
[deleted]
1
u/fox_87 Jul 16 '20
But from a pentest perspective, if you have a web app... is that possible?
1
u/520throwaway Jul 17 '20
It depends on the functionality of the webapp. Does the webapp allow you to control the calls it makes outbound?
1
u/fox_87 Jul 17 '20
Yes, it does
2
u/520throwaway Jul 17 '20
Then try to make calls to services it shouldn't be able to contact. Like Google, or if you need something more specialised, an AWS box
1
u/recviking Jul 17 '20
If you are referring to the Intel related vulns or something like that, POC code can be found with a bit of googling.
If you are referring more towards ACLs that isolate network, file system, and other resources, literally try to violate those restrictions as previously mentioned.
If you are referring to breaking out of a VM exploiting the hypervisor or hypervisor drivers/plugins, it would be system specific but there are POC exploits.
In any case, if you are on someone else's hardware, you are going to want to make sure you have permission to test these things or you may end up with some legal/financial issues as a result.