☁️ Cloud Security
Cloud penetration testing guide covering AWS, Azure, GCP vulnerabilities, IAM misconfigurations, S3 bucket exploitation, container security, and Kubernetes attacks.
AWS IAM Exploitation
CriticalPrivilege escalation, credential abuse, overpermissioned roles. Enumerate IAM users, roles, policies.
Full GuideS3 Bucket Attacks
HighPublic bucket access, bucket enumeration, data exfiltration. Misconfigured storage exposes sensitive data.
Full GuideSSRF to AWS Metadata
CriticalSSRF to AWS metadata, IAM credentials extraction, privilege escalation via cloud access.
Full GuideLambda Attacks
HighLambda function exploitation, backdoor creation, environment variable secrets extraction.
Full GuideAzure AD Attacks
CriticalAzure Active Directory exploitation, password spray, authentication bypass, OAuth misconfigs.
Full GuideGCP IAM Attacks
CriticalGCP privilege escalation, service account abuse, role enumeration, policy exploitation.
Full GuideContainer Escape
CriticalBreak out of containers to host. Docker CVE exploits, shared namespace abuse, cgroups breakout.
Full GuideLinux Commands Cheatsheet
MediumEssential Linux commands for cloud pentesting, enumeration, and exploitation.
Full Guide🛠️ Essential Tools
Pacu
AWS exploitation framework. Modules for privilege escalation, enumeration, and data exfiltration.
CloudMapper
AWS environments visualization, security audit, IAM enumeration.
ScoutSuite
Multi-cloud security auditing. AWS, Azure, GCP configuration review.
SkyFleet
Cloud security reconnaissance tool. S3 bucket finder, metadata enumeration.
CDK
Container Development Kit. Build offensive containers, privilege escalation.
Red-Kubernetes
Kubernetes attack toolkit. Cluster enumeration, privilege escalation, persistence.