📌
Pwining AWS & Azure
  • Introduction
  • Getting Started with AWS
    • Setting up access to AWS
      • Warning
      • Setup Student Virtual Machine
      • Access to AWS Console
      • Create IAM user
      • Access using awscli
      • Setting up and accessing the attacker VM
  • Getting Started with Azure
    • Setting up access to Azure
      • Software Required
      • Getting started with Azure CLI
      • Getting Started with Azure Portal
  • What the network will look like
    • The AWS and Azure network access for this training
  • Introduction to Azure Cloud Services
    • Introduction to Azure
      • Azure Services in Plain English
      • Mapping Azure Services to AWS Services
  • Cloud Compute with AWS
    • Cloud compute
      • Attacking EC2 via exposed ports
      • Application Misconfigurations
      • EC2 meta data abuse
      • Stealing credentials
      • AWS EC2 Metadata Tool
      • AWS EC2 Metadata Updates
      • Attacking Serverless endpoints
      • Using AWS Inspector for audits and attacks
  • Cloud Compute with Azure
    • Cloud compute in Azure
      • Setting up an Azure Target
      • Azure Virtual Machines
      • Azure Functions
  • Cloud Storage with AWS
    • Cloud storage
      • Abusing AWS S3 misconfigurations
      • Discovering and pillaging EBS
      • Cloud forensics for discovery and attacks
  • Cloud Storage with Azure
    • Cloud Storage in Azure - Azure Storage Account
      • Azure Storage Block Blobs
      • Attacking Azure Storage Blobs
      • Cloud forensics for Windows disks in Azure
  • Cloud Databases in AWS
    • Cloud Databases
      • AWS RDS misconfigurations
      • Data pilferage
  • OSINT against Cloud Targets
    • OSINT against cloud targets
      • Techniques for OSINT
      • Tools for finding public buckets
      • Tools for discovering, stealing keys and endpoints
  • Other Services in Azure
    • Other Services
      • Azure App Services Subdomain Takeover
      • Azure Run Command
      • Azure Databases
  • AWS Systems Manager
    • AWS Systems Manager
      • How AWS SSM works
      • Install the SSM Agent
      • Create and attach a SSM Policy
      • Executing commands on EC2 without SSH
      • Gaining a shell using a hosted script
  • AWS Services and Concepts for Security
    • AWS services and concepts for security
      • AWS IAM
      • AWS VPCs
        • AWS Security Groups
        • AWS Flowlogs
      • AWS CloudTrail
      • Requirements for Pentesting AWS Cloud Infra
  • Network Diagram for our AWS Lab
    • Network Lab Environment for AWS
  • Nuking Resources in AWS and Azure
    • Running aws-nuke
    • Azure Delete Resources
  • Additional References
    • Additional References
  • About Us
    • About Us
      • About Appsecco
Powered by GitBook