Hazem·Oct 8Solving PwnedLabs’ “Identify the AWS Account ID from a Public S3 Bucket” — One Digit at a TimePwnedLabs gives you a public S3 bucket and asks a simple question: which AWS account owns this thing? AWS account IDs are 12 digits and…
Hazem·Oct 8Solving PwnedLabs’ Breach in the Cloud — From Low-Priv IAM User to S3 Flag via sts:AssumeRoleSo I fired up PwnedLabs’ Breach in the Cloud lab (awscloudtrails3iamCTF), expecting something fancy. What I got was a user called…
sahan chamod·Sep 30Cloud Penetration Testing: AWS IAM, Metadata Services, Containers & KubernetesCloud environments changed the way applications are built, deployed, and attacked.
Chaitali Singhania·Sep 30Multi-Cloud Security: Why AWS, Azure and GCP Each Need a Different Testing ApproachFirms are now using AWS, Azure, and GCP in larger numbers, leading to complicated cloud infrastructures. Multi-cloud security testing is…A response icon1A response icon1
marianita_cloud·Sep 29DEFCON 34 Challenge Lab: Beanstalk (Easy) WriteupI completed the Beanstalk lab more than a month ago, during DEFCON 34 week. This was my first time working with Hack Smarter labs, so…
Razzle Mouse 🐭·Aug 29Introduction to AWS IAM Enumeration — Cybr Lab WalkthroughPlatform: Cybr — Hands-On Labs
aiswaryaKs·Mar 7My Multi-Cloud Red Team Analyst (MCRTA) Journey ☁️Hands-on AWS, Azure and GCP Security Labs — Cyber Warfare Labs
ZAYN·Feb 8Cloud-Native Ransomware: How Attackers Turn Your Own Cloud Against YouRansomware used to mean: some shady EXE lands on a server, encrypts disks, leaves a note.
HACK SUDO·Jan 15🔥 Exploiting a Misconfigured S3 Bucket — Hands‑On CTF WalkthroughLearn how a single misconfiguration can lead to full website takeover