AWS

• AWS
  • Starting point
  • External Resource
    • Tools list
    • Resources
    • Videos
  • Book
  • Challenges
  • VMs

---

Starting point

---

External Resource

• https://rhinosecuritylabs.com/landing/aws-penetration-testing-report/

• https://www.getastra.com/blog/security-audit/cloud-penetration-testing/

• https://github.com/appsecco/attacking-cloudgoat2

• https://pentestbook.six2dez.com/enumeration/cloud/aws

Tools list

Resources

• https://research.nccgroup.com/2020/04/24/the-extended-aws-security-ramp-up-guide/

• https://web.archive.org/web/20211027073753/https://book.hacktricks.xyz/pentesting/pentesting-web/buckets/aws-s3

• https://notes.offsec-journey.com/cloud-security-pentest/penetration-testing-aws-storage

• https://r00tz-ctf.awssecworkshops.com/

Videos

https://www.youtube.com/watch?v=JUO-m5ga-gc&list=PLMoaZm9nyKaMwjXerbr2xXPgv_4uBOqU0

https://youtube.com/playlist?list=PLMoaZm9nyKaNRN0SoR_PBVYc_RAhbZdG4&si=7ULnIPlKHyFaLM18

---

Book

---

Challenges

• awsgoat
• flaws - http://flaws.cloud.s3.amazonaws.com/index.html

http://flaws2.cloud/

• https://n0j.github.io/2017/10/02/aws-s3-ctf.html

• https://world.hey.com/alois/aws-capture-the-flag-write-up-e64fa089

• https://github.com/mzet-/ctf-writeups/blob/master/flaws.cloud/flaws.cloud.md

• https://micrictor.github.io/flAWS/

• https://blog.welcomethrill.house/2021/03/flawscloud-experience-and-write-up.html

• https://blog.pwne.rs/post/flaws/

https://executeatwill.com/2022/01/17/Flaws.Cloud-Walkthrough/ https://executeatwill.com/2022/01/20/Flaws2.Cloud-Walkthrough/

---

VMs

---

https://tryhackme.com/room/adventofcyber3

Cloud Elf Leaks Cloud Playing With Containers