Cloud Penetration Testing Workshop

Cloud Penetration Testing Workshop

Hands-on workshop with cloud environments real (Terraform-deployed):

n
• AWS (5 labs) — IMDS v1 exploitation, IAM policy abuse, S3 bucket misconfigurestion, Lambda injection, cross-account role assumption.
n
• Azure (3 labs) — Managed Identity abuse, Storage Account key extraction, Azure AD app registerstion exploit.
n
• GCP (2 labs) — Service account key theft, metadata server abuse, Cloud Function code injection.
n
• Each lab: Terraform for deploy, objetivo claro, hints progresivos, writeup, cleanup script.
n
• Requirements: Cuenta free tier in each cloud provider (coste estimado: $0 with cleanup inmediato).
n