Introduction to AWS Penetration Testing

Introduction to AWS Penetration Testing

8h 48mIntermediate2022-10-03

Authors

ACI Learning

ACI Learning

Addressing the Global IT Skills Gap

Course details

When it comes to hosting resources for today’s largest companies, AWS is the world’s leading cloud platform. While AWS provides its customers with top-notch protection, security issues and data breaches still can and do occur, and you need to be ready to respond to them effectively. One of the best courses of action is penetration testing, which can help you discover potential security issues long before they ever become full-fledged incidents.

Check out this beginner-friendly course from ITProTV to gain more experience exploiting security flaws in the AWS environment. Brush up your knowledge base by walking through some of the most relevant and basic AWS concepts and skills. Explore how to leverage useful administrative and security tools specific to pentesters in AWS, including Pacu, AWSBucketDump, GrayhatWarfare, flaws.cloud, CloudGoat, and more. By the end of this course, you’ll be ready to apply your new skills as a defense against a variety of real-world AWS security issues.

Skills covered

Penetration TestingIntroduction toCloud ServicesCloud PlatformsCybersecurityCloud Computing

Concepts

Introduction

  • AWS pentesting

Basic Concepts

  • AWS pentesting policy
  • AWS keys
  • IAM security issues
  • S3
  • EC2
  • Lambda
  • ARNs

Tools

  • AWS CLI
  • Pacu
  • AWS bucket dump
  • GrayhatWarfare

Flaws

  • Flaws - Level 1
  • Flaws - Level 2
  • Flaws - Level 3
  • Flaws - Level 4
  • Flaws - Level 5
  • Flaws - Level 6

CloudGoat

  • Configuring CloudGoat
  • IAM PrivEsc by Rollback
  • Lambda PrivEsc
  • Lambda PrivEsc Pt 2
  • Cloud Breach S3
  • IAM PrivEsc by attachment
  • EC2 SSRF
150,000 Toman