Skip to main content
OverflowMyBuffers
  • Home
  • Active Directory1
  • Appian5
  • Cloud4
  • Code Reviews1
  • CRTO Notes4
  • Docker1
  • General2
  • Keycloak1
  • Mendix1
  • Mobile1
  • OSED3
  • OSEP Notes2
  • OSINT1
  • OSWE Notes6
  • Pentesting AI1
  • Reverse Engineering1
  • SAP9
  • Sap Security1
  • Sliver1
  • Tools1
  • Wifi7
OverflowMyBuffers / Cloud

Cloud Resources

AWS

Cloud Red Teaming: AWS Initial Access & Privilege Ecsalation: https://speakerdeck.com/tweekfawkes/cloud-red-teaming-aws-initial-access-and-privilege-escalation

Pentesting AWS: https://www.slideshare.net/MichaelFelch/welcome-to-the-jungle-pentesting-aws

So, right now, if you are a red teamer who needs to grow your cloud-hacking skill set, I would recommend consuming almost all of the content below:

  • Beau Bullock - Videos
    • 2hr Workshop Breaching the Cloud
  • Bryce Kunz - Videos
  • Mike Felch - Slides - Video above
  • Carlos Polop / HalbornSecurity
    • https://cloud.hacktricks.xyz/
    • AWS Red Teaming Slides
  • Rhino Security Labs (maker of cloudgoat! ++ an epic walkthrough from dhiyaneshgeek)
  • rvrsh3ll - Azure Console Pivoting 101
  • aadinternals talks - Video
  • Introduction to Offensive Operations in AWS
  • What I Wish I Knew Before Pentesting AWS Environments
  • Nahamsec’s Cloud Hacking Series

Azure

https://github.com/dafthack/CloudPentestCheatsheets/blob/master/cheatsheets/Azure.md

On this page

  • AWS
  • Azure