Preliminary research

Navigating Lax Load Balancers: When an Intersection Gets You Inside

Francesco Lacerenza and Mohamed Ouad · Doyensec

AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.

Correlates AWS load-balancer listeners, ordered rules, target groups and backend members to find alternate routes around source-IP, authentication or CDN restrictions. The ELBaph tool and Terraform lab turn separate resource configurations into end-to-end reachability checks, with external-vantage requirements made explicit.

Record

Researcher

Francesco Lacerenza and Mohamed Ouad

Published by

Doyensec

Topic

Other

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• ELBaph: AWS Load Balancer Attack-Path Analysis Repository
• ELBaph Terraform laboratory

Tags

• aws
• load-balancer
• auth-bypass
• reverse-proxy
• tooling
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Francesco Lacerenza and Mohamed Ouad, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 13 September 2026.