Cloud-Pentest

Cloud computing refers to the delivery of computing services, including storage, processing power, and software, over the internet. Instead of owning and maintaining physical servers or hardware, users can access and use these resources on-demand from a cloud service provider.

1. What is the cloud? | Cloud definition : https://www.cloudflare.com/learning/cloud/what-is-the-cloud/

2. What is Learn to Cloud? : https://learntocloud.guide/docs/Welcome

Hacking Techniques

3. https://csbygb.gitbook.io/pentips/cs-by-gb-pentips/readme

4. Google Cloud Platform : https://csbygb.gitbook.io/pentips/cloud-pentest/gcp

5. AWS : https://csbygb.gitbook.io/pentips/cloud-pentest/aws

6. Introduction to Cloud Pentesting: https://www.hackthebox.com/blog/intro-cloud-pentesting

7.Hacking the cloud by Nick Frichette : https://hackingthe.cloud/

8. Cloud Security - Attacks by : https://github.com/CyberSecurityUP/Cloud-Security-Attacks

9. My AWS Pentest Methodology : https://medium.com/@MorattiSec/my-aws-pentest-methodology-14c333b7fb58

10. Permission Mining in GCP - Colin Estep : https://www.youtube.com/watch?v=QIXZ0DS9arc

Read CTF write ups: 11. flAWS writeups by Nick Doyle : https://nick-p-doyle.medium.com/flaws-cloud-a-fun-interactive-way-to-learn-the-basics-of-aws-security-19463c2b6ece

12. EC2 SSRF - Writeup https://medium.com/@vulnmachines/ec2-ssrf-vulnmachines-walkthrough-be382b83b0f6

13. Vulnerable Lambda : https://medium.com/@vulnmachines/vulnerable-lambda-vulnmachines-walkthrough-529d2fd3363c

14. Misconfigured Bucket : https://medium.com/@vulnmachines/misconfigured-bucket-vulnmachines-lab-walkthrough-509b0faa6779

15. Special Policy Bucket : https://medium.com/@vulnmachines/special-policy-bucket-vulnmachines-walkthrough-3e4927c416e9

16. Open AWS S3 bucket leaks all Images uploaded to Zomato by yashrs on Hackerone: https://hackerone.com/reports/507097

17. CVE-2019-5736: Escape from Docker and Kubernetes containers to root on host by adam_iwaniuk on Hackerone: https://hackerone.com/reports/495495

𝗣𝗥𝗔𝗖𝗧𝗜𝗖𝗘

18. Free Lab: https://www.linkedin.com/posts/pentesteracademy_lab-manual-cloud-security-101-ctf-activity-6978654049411719168-Jhf3/?utm_source=share&utm_medium=member_ios

19. flAWS : http://flaws.cloud.s3-website-us-west-2.amazonaws.com/

20. Insekube by congo4tor : https://tryhackme.com/room/insekube