Media Summary: Starting with no access to the AWS account, we compromise a webapp hosted in an EC2 instance by finding both an SSRF and ... We start off as a fairly high-privileged user who can perform multiple IAM and EC2 API calls. Using these permissions, it was ... The objective of this scenario was to gain access to an RDS instance. We were provided with the credentials of two different users.

Hacking In The Cloud Cloudgoat Ecs Takeover - Detailed Analysis & Overview

Starting with no access to the AWS account, we compromise a webapp hosted in an EC2 instance by finding both an SSRF and ... We start off as a fairly high-privileged user who can perform multiple IAM and EC2 API calls. Using these permissions, it was ... The objective of this scenario was to gain access to an RDS instance. We were provided with the credentials of two different users. Resources: Enroll in my Courses (search for Tyler Ramsbey) Support me on Ko-Fi ... Join up and get everything you *actually* need to start This video was originally sponsored by ITProTV. We've since launched NetworkChuck Academy, our own place to learn IT: ...

Purchase my Bug Bounty Course here bugbounty.nahamsec.training Buy Me Coffee: ... One leaked AWS key can cost you $47000 overnight. Learn how attackers find your credentials in seconds, escalate privileges ...

Photo Gallery

Hacking in the Cloud - Cloudgoat: ecs_takeover
Hacking in the Cloud - Cloudgoat: iam_privesc_by_attachment
Hacking in the Cloud - Cloudgoat: rce_web_app
Hacking in the Cloud - Cloudgoat: cloud_breach_s3
I Hacked an AWS ECS Cluster Starting From a Single Website - CloudGoat ecs_takeover
Getting Started with Hacking AWS ECS!
Hacking AWS || SNS_Secrets - Official Walkthrough (CloudGoat!)
Introduction to CloudGoat -- [Learn AWS Pentesting!]
How I Hacked the Cloud—A Step-by-Step Roadmap
intro to cloud hacking (leaky buckets)
Cloud Hacking: The Basics
How Hackers Exploit Systems vs Cloud Data  | Real Attack Example
Sponsored
View Detailed Profile
Hacking in the Cloud - Cloudgoat: ecs_takeover

Hacking in the Cloud - Cloudgoat: ecs_takeover

Starting with no access to the AWS account, we compromise a webapp hosted in an EC2 instance by finding both an SSRF and ...

Hacking in the Cloud - Cloudgoat: iam_privesc_by_attachment

Hacking in the Cloud - Cloudgoat: iam_privesc_by_attachment

We start off as a fairly high-privileged user who can perform multiple IAM and EC2 API calls. Using these permissions, it was ...

Hacking in the Cloud - Cloudgoat: rce_web_app

Hacking in the Cloud - Cloudgoat: rce_web_app

The objective of this scenario was to gain access to an RDS instance. We were provided with the credentials of two different users.

Hacking in the Cloud - Cloudgoat: cloud_breach_s3

Hacking in the Cloud - Cloudgoat: cloud_breach_s3

This scenario is based off of a real

I Hacked an AWS ECS Cluster Starting From a Single Website - CloudGoat ecs_takeover

I Hacked an AWS ECS Cluster Starting From a Single Website - CloudGoat ecs_takeover

This

Sponsored
Getting Started with Hacking AWS ECS!

Getting Started with Hacking AWS ECS!

AWS

Hacking AWS || SNS_Secrets - Official Walkthrough (CloudGoat!)

Hacking AWS || SNS_Secrets - Official Walkthrough (CloudGoat!)

Resources: Enroll in my Courses (search for Tyler Ramsbey) https://academy.simplycyber.io Support me on Ko-Fi ...

Introduction to CloudGoat -- [Learn AWS Pentesting!]

Introduction to CloudGoat -- [Learn AWS Pentesting!]

Resources: Enroll in my Courses (search for Tyler Ramsbey) https://academy.simplycyber.io Support me on Ko-Fi ...

How I Hacked the Cloud—A Step-by-Step Roadmap

How I Hacked the Cloud—A Step-by-Step Roadmap

Join up and get everything you *actually* need to start

intro to cloud hacking (leaky buckets)

intro to cloud hacking (leaky buckets)

This video was originally sponsored by ITProTV. We've since launched NetworkChuck Academy, our own place to learn IT: ...

Cloud Hacking: The Basics

Cloud Hacking: The Basics

Purchase my Bug Bounty Course here bugbounty.nahamsec.training Buy Me Coffee: ...

How Hackers Exploit Systems vs Cloud Data  | Real Attack Example

How Hackers Exploit Systems vs Cloud Data | Real Attack Example

Many people think cybersecurity and

1 Leaked AWS Key = Full Cloud Takeover (Here's How)

1 Leaked AWS Key = Full Cloud Takeover (Here's How)

One leaked AWS key can cost you $47000 overnight. Learn how attackers find your credentials in seconds, escalate privileges ...