Back

Cloud Pentesting Engineer

This course is designed to provide a beginner-friendly yet comprehensive guide to cloud penetration testing, with a strong emphasis on hands-on learning and real-world attack scenarios. By the end of the course, participants will have gained the skills and confidence to conduct basic cloud penetration tests in AWS, Azure, and GCP environments.

Tarek

Lead Trainer

30 lectures

Description
Coming soon

Course Curriculum

Introduction Cloud Environments

4 lessons

Overview of Cloud Computing Models: IaaS, PaaS, SaaS

Premium

Intro to Azure

Premium

Intro to AWS

Premium

Intro to GCP

Premium
Interacting With The Cloud

3 lessons

Interacting using PowerShell

Premium

Interacting using command line clients

Premium

Interacting using portals/consoles

Premium
Cloud Recon

3 lessons

Determining what cloud is in use

Premium

Recon of cloud services

Premium

Identifying cloud services in use

Premium
Initial Access

6 lessons

Username recon

Premium

Password spraying attacks

Premium

Different types of phishing attacks

Premium

Different types of phishing attacks

Premium

Adversary in the middle attack

Premium

Bypassing initial defenses like MFA

Premium
Exploiting Public Storage

4 lessons

Finding public storage in Azure, AWS and GCP

Premium

Accessing public Azure blobs

Premium

Accessing public AWS buckets

Premium

Accessing public GCP buckets

Premium
Exploiting Public VMs

3 lessons

Exploiting Azure VMs

Premium

Exploiting AWS EC2 instances

Premium

Exploiting GCP VMs

Premium
Understanding Access Control

3 lessons

Understanding and exploiting RBAC in Azure

Premium

Understanding and exploiting RBAC in AWS

Premium

Understanding and exploiting RBAC in GCP

Premium
Cloud Post-Exploitation

4 lessons

Recon as an insider

Premium

Identifying further services privilege escalation

Premium

Identifying further services for persistence

Premium

Looting secrets

Premium