Cloud Pentesting Engineer

As more businesses migrate to the cloud, the security of cloud infrastructures becomes paramount. Misconfigurations, weak access controls, and insufficient security practices can lead to severe data breaches, financial losses, and reputational damage. This hands-on, intensive course on cloud penetration testing is designed to equip security professionals with the skills, tools, and techniques necessary to identify vulnerabilities and test the security of cloud environments. Participants will learn how to assess the security of cloud platforms, specifically Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP).

The course provides a detailed methodology for penetration testing within AWS, Azure, and GCP, focusing on the specific vulnerabilities and configurations of each cloud provider. Students will explore a variety of attack vectors such as misconfigured identity and access management (IAM) roles, insecure storage services, privilege escalation, and lateral movement within cloud environments. By the end of the course, participants will be equipped with the knowledge needed to assess and secure the most widely-used cloud platforms in the industry.

What you will learn

• Cloud basics: IaaS, PaaS and SaaS, and an introduction to Azure, AWS and GCP.

• Working with the cloud: PowerShell, command line clients and the web portals and consoles.

• Cloud recon: finding out which cloud a target uses and which cloud services are running.

• Initial access: username recon, password spraying, phishing, adversary-in-the-middle attacks and bypassing defenses like MFA.

• Exploiting public storage: finding and accessing public Azure blobs, AWS buckets and GCP buckets.

• Exploiting public VMs: Azure VMs, AWS EC2 instances and GCP VMs.

• Access control: understanding and exploiting RBAC in Azure, AWS and GCP.

• Post-exploitation: recon as an insider, privilege escalation, persistence and looting secrets.

The main attacks are shown on all three clouds, so you learn AWS penetration testing alongside Azure and GCP.

Who is this course for?

• Penetration Testers and red teamers

• Cloud Security Engineers and Architects

• System Administrators and Network Engineers

• Cybersecurity Enthusiasts and Aspiring Cloud Security Professionals