☁️ Cloud Security

AWS Identity & Access Management

Comprehensive testing of AWS IAM configurations and privilege escalation paths.

• IAM policy analysis and exploitation
• Cross-account role assumption attacks
• Service-linked role exploitation
• Identity federation bypass techniques

EC2 Instance Security

Elastic Compute Cloud instance enumeration and exploitation techniques.

• EC2 metadata service exploitation
• Instance profile privilege escalation
• SSM agent exploitation
• EBS snapshot analysis

S3 Bucket Security

Simple Storage Service misconfiguration identification and data extraction.

• S3 bucket enumeration techniques
• Bucket policy bypass methods
• Presigned URL exploitation
• Cross-account bucket access

Azure Active Directory

Azure AD security testing and privilege escalation techniques.

• Azure AD enumeration and reconnaissance
• Application registration exploitation
• Conditional access bypass methods
• Azure AD Connect security assessment

Azure Resource Management

Azure Resource Manager security testing and lateral movement.

• Resource group enumeration
• Azure Key Vault exploitation
• Managed Identity abuse
• Azure Policy bypass techniques

Azure Compute Security

Azure virtual machine and container security assessment.

• VM metadata service exploitation
• Azure Container Instances testing
• Azure Functions security assessment
• Azure Arc exploitation

GCP Identity & Access

Google Cloud IAM security testing and privilege escalation.

• Cloud IAM policy analysis
• Service account key exploitation
• Workload Identity abuse
• Organization policy bypass

Compute Engine Security

GCP Compute Engine instance security assessment.

• Metadata service exploitation
• Instance template analysis
• Cloud Shell security testing
• Preemptible instance exploitation

Cloud Storage Security

Google Cloud Storage bucket security testing.

• Cloud Storage enumeration
• Bucket IAM policy testing
• Signed URL exploitation
• Cloud Storage transfer exploitation

Docker Security Testing

Docker container security assessment and escape techniques.

• Container escape techniques
• Docker socket exploitation
• Container image analysis
• Docker Compose security testing

Kubernetes Security

Kubernetes cluster security testing and privilege escalation.

• Kubernetes API server exploitation
• RBAC policy bypass techniques
• Pod security policy exploitation
• Cluster network security testing

Container Registry Security

Container registry security assessment and image exploitation.

• Registry enumeration techniques
• Image vulnerability analysis
• Registry access control testing
• Supply chain attack vectors

AWS Lambda Security

Lambda function security testing and exploitation techniques.

• Lambda function enumeration
• Environment variable exploitation
• Lambda layer security testing
• Event source mapping exploitation

Azure Functions Security

Azure Functions security assessment and privilege escalation.

• Function app enumeration
• Application settings exploitation
• Function trigger security testing
• Managed Identity abuse in functions

Cloud Functions Security

Google Cloud Functions security testing and exploitation.

• Cloud Function enumeration
• Environment variable exploitation
• Function IAM policy testing
• Cloud Scheduler exploitation

Secrets Management

Cloud secrets management system security testing.

• AWS Secrets Manager exploitation
• Azure Key Vault security testing
• Google Secret Manager assessment
• HashiCorp Vault cloud integration

Cloud Networking

Cloud network security assessment and lateral movement.

• VPC/VNet security testing
• Cloud firewall bypass techniques
• Load balancer security assessment
• CDN security testing

DevOps Pipeline Security

CI/CD pipeline security testing and exploitation.

• GitHub Actions security testing
• Azure DevOps pipeline assessment
• GitLab CI/CD security testing
• Jenkins cloud integration security

AWS Testing Tools

• Pacu: AWS exploitation framework
• CloudMapper: AWS environment visualization
• Scout Suite: Multi-cloud security auditing
• aws-vault: AWS credential management

Azure Testing Tools

• MicroBurst: Azure security assessment
• ROADtools: Azure AD reconnaissance
• Stormspotter: Azure attack path mapping
• Azurite: Azure emulator for testing

Multi-Cloud Tools

• Cloudsplaining: IAM policy analysis
• Cloudsploit: Cloud security scanning
• Falco: Runtime security monitoring
• Kube-hunter: Kubernetes security testing