Offensive Cloud Security
Book Now - 3 Delivery Methods Available:Classroom Virtual Classroom Private Group - Virtual Self-Paced Online
Whether you are an Architect, Developer, Pen Tester, Security or DevOps Engineer, or anyone with a need to understand and manage cloud security vulnerabilities, specifically in a Cloud and Cloud Native environment, understanding relevant hacking techniques, and knowing how to protect yourself from them is critical. Offensive Cloud Hacking, covers both the theory as well as the practical through a number of modern techniques that may be used to compromise various Cloud services and infrastructure.
Learners will be provided with numerous cloud security scripts and tools (some public and some NotSoPublic) will also be provided during the training, along with the student handouts. The course also comes with detailed answer sheets. That is a step by step walkthrough of how every exercise within the class needs to be solved. These answer sheets are also provided to students at the end of the class.
Delegates will gain knowledge of offensive cloud security hacking tools and techniques, including attacking, exploiting a variety of Cloud services and infrastructure. You will play the part of the hacker, compromising serverless apps, cloud machines, storage and database services, dormant assets and resources. Including the opportunity to learn privilege escalation and pivoting techniques specific to cloud environments.
Cloud Administrators, Developers, Solutions Architects, DevOps Engineers, SOC Analysts, Penetration Testers, Network Engineers, security professionals and enthusiasts and anyone who wants to take their offensive cloud hacking skills to the next level.
We work with the following best of breed training partners using our bulk buying power to bring you a wider range of dates, locations and prices.
Introduction to Cloud Computing (4 topics)
- Introduction to cloud and why cloud security matters
- Comparison with conventional security models
- Shared responsibility model
- Legalities around Cloud Pentesting
Enumeration of Cloud Environments (2 topics)
- DNS based enumeration
- OSINT techniques for cloud-based asset
Gaining Entry Via Exposed Services (3 topics)
- Serverless based attacks (AWS Lambda / Azure & Google functions)
- Web application Attacks
- Exposed Service Ports
Attacking Specific Cloud Services (6 topics)
- Storage Attacks
- Azure AD Attacks
- Containers and Kubernetes Clusters
- IAM Misconfiguration Attacks
- Roles and permissions-based attacks
- Attacking Cognito misconfigurations
Post-Exploitation (4 topics)
- Persistence in Cloud
- Post exploit enumeration
- Snapshot access
- Backdooring the account
Prior pen test / security experience is not a strict requirement, however, some knowledge of Cloud Services and familiarity with common command-line syntax will be beneficial.
Please select from the dates below to make an enquiry or booking.
Different pricing structures are available including special offers. These include early bird, late availability, multi-place, corporate volume and self-funding rates. Please arrange a discussion with a training advisor to discover your most cost effective option.