Cloud Penetration Testing Workshop

Cloud Penetration Testing Workshop

Workshop hands-on con entornos cloud reales (Terraform-deployed):

• AWS (5 labs) — IMDS v1 exploitation, IAM policy abuse, S3 bucket misconfiguration, Lambda injection, cross-account role assumption.
• Azure (3 labs) — Managed Identity abuse, Storage Account key extraction, Azure AD app registration exploit.
• GCP (2 labs) — Service account key theft, metadata server abuse, Cloud Function code injection.
• Cada lab: Terraform para deploy, objetivo claro, hints progresivos, writeup, cleanup script.
• Requisitos: Cuenta free tier en cada cloud provider (coste estimado: $0 con cleanup inmediato).