Cloud Security S3 Bucket Misconfiguration and Data Exposure
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
cloud-pentest
Cloud Security 
Cloud Security Abusing AWS Instance Metadata (IMDS) and SSRF
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security AWS IAM Privilege Escalation Paths
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security GCP Service Account Impersonation and Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Cloud Credential Harvesting and Secret Sprawl
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Serverless and Lambda Security Pitfalls
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security AWS EKS Security: IRSA and Pod Identity
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security Azure Storage Accounts and SAS Token Abuse
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security AWS Organizations and Service Control Policies (SCP) Security
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security GCP Workload Identity and Cloud Functions Security
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security GCP Organization Policy and IAM Conditions
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Cloud Security AWS Cognito Misconfigurations and Identity Pool Abuse
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Tools & Defense Kubernetes Security 101: From kubectl to RBAC and Token Theft
A practical intro to Kubernetes security: kubectl, RBAC, service account token abuse, kube-hunter scanning, and how to defend.
Cloud Security AWS IAM Privilege Escalation Paths: From Low-Priv Credentials to Account Takeover
A practical look at common AWS IAM privilege escalation paths, PoC commands, and the blue-team controls that shut them down.
Cloud Security Attacking and Securing Amazon S3: Buckets, Policies, and Presigned URLs
A practical guide to enumerating, exploiting, and hardening Amazon S3 buckets, ACLs, policies, and presigned URLs.
Cloud Security Azure & Entra ID Attack Paths: Hunting Privilege Escalation with AzureHound
Advanced Entra ID attack paths: AzureHound enumeration, role assignment abuse, dynamic group injection, and OAuth consent grants.
Cloud Security Abusing Azure Managed Identities: From IMDS Token Theft to ARM Takeover
How attackers steal IMDS access tokens from Azure Managed Identities and pivot into the ARM API, plus blue-team detection.
Cloud Security GCP Privilege Escalation: Abusing Service Account Impersonation and IAM Misconfigurations
How attackers abuse actAs, setIamPolicy, and service account impersonation to escalate privileges in Google Cloud, with blue-team defenses.
Cloud Security Cloud Metadata Service (IMDS) Attacks via SSRF: Stealing Credentials and Defending IMDSv2
How attackers pivot from SSRF to cloud credential theft through 169.254.169.254, and how IMDSv2 and hop limits stop them.
Cloud Security Cloud Logging and Detection: Attacking and Defending CloudTrail and GuardDuty
How attackers blind CloudTrail and evade GuardDuty, and how blue teams close the detection gaps.
Cloud Security Attacking AWS STS, AssumeRole, and Cross-Account Trust
How sts:AssumeRole, weak trust policies, and missing ExternalId enable cross-account pivots, plus blue-team detection.