Hacking Cloud Infrastructure (CL-HCI)

* Cloud Administrators
* Developers
* Solution Architects
* Devops Engineers
* SOC Analysts
* Pen Testers
* Network Engineers
* Security enthusiasts and anyone who wants to take their skills to next level.

INTRODUCTION TO CLOUD COMPUTING

• Introduction to cloud and why cloud security matters
• Comparison with conventional security models
• Shared responsibility model
• Legalities around Cloud Pentesting
• Attacking Cloud Services

ENUMERATION OF CLOUD ENVIRONMENTS

• DNS based enumeration
• OSINT techniques for cloud-based asset

GAINING ENTRY VIA EXPOSED SERVICES

• Serverless based attacks (AWS Lambda / Azure & Google functions)
• Web application Attacks
• SSRF Exploitation over AWS ElasticBeanStalk
• Exploiting vulnerable applications over GCP and Azure

ATTACKING STORAGE SERVICES (AWS, AZURE, GCP)

• Exploring files in storage
• Exploring SAS URL's in Azure
• Achieving privilege elevation via secrets in Storage
• Remote code Execution via storage in PaaS, FaaS environment

ATTACKING AZURE AD ENVIRONMENT

• Enumeration in Azure AD
• Various Azure Services
• Azure Service exploitation
• Stealing secrets from Azure services

IAM MISCONFIGURATION ATTACKS

• Exploiting Shadow admins in AWS and Azure
• Attacking AWS Incognito misconfigurations

POST – EXPLOITATION

• Persistence in Cloud
• Post exploit enumeration
• Snapshot access
• Backdooring the account
  

EXPLOITING KUBERNETES CLUSTERS AND CONTAINERS AS A SERVICE

• Understanding how container technology work
• Exploiting docker environments and breaking out of containers
• K8s exploitation and breakouts

AUDITING AND BENCHMARKING OF CLOUD

• Preparing for the audit
• Automated auditing via tools
• Golden Image / Docker image audits
• Auditing Kubernetes Environments using Opensource tools
• Windows IaaS auditing
• Linux IaaS Auditing
• Relevant Benchmarks for cloud

Prior pentest/security experience is not a strict requirement, however, some knowledge of Cloud Services and familiarity with common Unix command-line syntax will be beneficial.

Delegates must bring their own laptop and have admin/root access on it. The laptop must have a virtualization software (virtualbox / VMWare) pre installed. A customized version of Kali Linux (ova format) containing custom tools, scripts and VPN scripts for the class will be provided to the students. The laptop should have at least 4 GB RAM and 20 GB of free disk space dedicated for the VM.

Not applicable