Preliminary research

Navigating Lax Load Balancers: When an Intersection Gets You Inside

Francesco Lacerenza and Mohamed Ouad · Doyensec

AI-collected research leads through 6 October 2026, including bounded month-by-month reviews of selected social and community sources from January through September. Unranked, incomplete, not community-vetted, and subject to change.

Correlates AWS load-balancer listeners, ordered rules, target groups and backend members to find alternate routes around source-IP, authentication or CDN restrictions. The ELBaph tool and Terraform lab turn separate resource configurations into end-to-end reachability checks, with external-vantage requirements made explicit.

Record

Researcher

Francesco Lacerenza and Mohamed Ouad

Published by

Doyensec

In the archive

• Collected in the 2026 preliminary research sweep

Related sources

• ELBaph
• Reproducible lab

Tags

• aws
• load-balancer
• auth-bypass
• reverse-proxy
• tooling
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Francesco Lacerenza and Mohamed Ouad, first published at the original source. Preserved copies are kept so the citation survives its host.