Cloud Security S3 Bucket Misconfiguration and Data Exposure
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
AWS
Cloud Security 
Cloud Security Abusing AWS Instance Metadata (IMDS) and SSRF
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security AWS IAM Privilege Escalation Paths
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Serverless and Lambda Security Pitfalls
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security AWS EKS Security: IRSA and Pod Identity
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security AWS Organizations and Service Control Policies (SCP) Security
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Cloud Detection Engineering with CloudTrail and GuardDuty
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security AWS Cognito Misconfigurations and Identity Pool Abuse
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Envelope Encryption and KMS Patterns
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense AWS Security Fundamentals and Attack Techniques: IAM, S3, and the Metadata Service
A practical primer on attacking and defending AWS: IAM enumeration, S3 misconfigurations, IMDS abuse, and Pacu.
Cloud Security AWS IAM Privilege Escalation Paths: From Low-Priv Credentials to Account Takeover
A practical look at common AWS IAM privilege escalation paths, PoC commands, and the blue-team controls that shut them down.
Cloud Security Attacking and Securing Amazon S3: Buckets, Policies, and Presigned URLs
A practical guide to enumerating, exploiting, and hardening Amazon S3 buckets, ACLs, policies, and presigned URLs.
Cloud Security Breaking Serverless: Attacking AWS Lambda from Event Injection to RCE
How attackers turn Lambda event injection into code execution and credential theft, and how blue teams stop it.
Cloud Security Enumerating and Exploiting AWS with Pacu
A practical walkthrough of using Pacu to enumerate AWS identities, IAM permissions, and discover privilege escalation paths.
Cloud Security Cloud Metadata Service (IMDS) Attacks via SSRF: Stealing Credentials and Defending IMDSv2
How attackers pivot from SSRF to cloud credential theft through 169.254.169.254, and how IMDSv2 and hop limits stop them.
Cloud Security Cloud Logging and Detection: Attacking and Defending CloudTrail and GuardDuty
How attackers blind CloudTrail and evade GuardDuty, and how blue teams close the detection gaps.
Cloud Security Attacking AWS STS, AssumeRole, and Cross-Account Trust
How sts:AssumeRole, weak trust policies, and missing ExternalId enable cross-account pivots, plus blue-team detection.