Cloud Penetration Testing Workshop
$79.99
Cloud pentest workshop with 6 deployable Terraform labs (valid HCL): AWS IMDSv1 credential theft, AWS public S3, Azure Managed Identity + Key Vault, Azure public blob, GCP metadata token theft and GCP leaked SA key — plus metadata harvesting, bucket enumeration and IAM privesc tooling.
Key Features
- • 6 labs (2 AWS, 2 Azure, 2 GCP), terraform fmt clean, each with attack steps + fix
- • Metadata harvester generator, bucket enumeration wordlists, IAM privesc checker
- • Real vulnerable resources by design (destroy when done)
Requirements
- terraform; a cloud account for each lab (costs apply).
Changelog
- v2.1 — added the 6 Terraform labs (was script-only).
Package Contents
Exact contents of the download archive (21 files):
| README.md | 1,242 B |
| labs/ | 0 B |
| labs/gcp_sa_lab/ | 0 B |
| labs/gcp_sa_lab/main.tf | 1,890 B |
| labs/gcp_sa_lab/README.md | 452 B |
| labs/gcp_metadata_lab/ | 0 B |
| labs/gcp_metadata_lab/main.tf | 1,170 B |
| labs/gcp_metadata_lab/README.md | 571 B |
| labs/azure_mi_lab/ | 0 B |
| labs/azure_mi_lab/main.tf | 3,997 B |
| labs/azure_mi_lab/README.md | 545 B |
| labs/aws_s3_lab/ | 0 B |
| labs/aws_s3_lab/main.tf | 1,408 B |
| labs/aws_s3_lab/README.md | 327 B |
| labs/azure_storage_lab/ | 0 B |
| labs/azure_storage_lab/main.tf | 1,478 B |
| labs/azure_storage_lab/README.md | 295 B |
| labs/aws_imds_lab/ | 0 B |
| labs/aws_imds_lab/main.tf | 2,229 B |
| labs/aws_imds_lab/README.md | 460 B |
| cloud_pentest.py | 10,185 B |
Related Tools
Training & Courses
Buffer Overflow Lab — Stack Smashing 101
Training & Courses
Active Directory Attack Path Lab
Training & Courses
Web Application Hacking Challenges Pack
Training & Courses