SANS SEC588 - Cloud Penetration Testing (2023)

SANS SEC588 - Cloud Penetration Testing (2023)
     SEC588 I01_07 2023 hide01.ir.pdf -


     1.1.1 Architecture, Discovery and Recon at Scale hide01.ir.webm -


     1.1.10 Generic Cloud Architectures hide01.ir.webm -


     1.1.11 Control Plane vs Data Plane hide01.ir.webm -


     1.1.12 Cloud Similarities and Differences hide01.ir.webm -


     1.1.2 Table of Contents (1) hide01.ir.webm -


     1.1.3 Table of Contents (2) hide01.ir.webm -


     1.1.4 Agenda hide01.ir.webm -


     1.1.5 Course Roadmap hide01.ir.webm -


     1.1.6 Course Introduction hide01.ir.webm -


     1.1.7 Why Cloud Penetration Testing hide01.ir.webm -


     1.1.8 Unique Properties of Cloud Computing hide01.ir.webm -


     1.1.9 Defining Cloud hide01.ir.webm -


     1.10.1 Course Roadmap hide01.ir.webm -


     1.10.2 Visualizations During Recon hide01.ir.webm -


     1.10.3 Visualizing the Same Site hide01.ir.webm -


     1.10.4 Gowitness hide01.ir.webm -


     1.10.5 Gowitness CLI hide01.ir.webm -


     1.10.6 Gowitness Report hide01.ir.webm -


     1.10.7 External Vulnerability Scanning and Systems Identification hide01.ir.webm -


     1.10.8 Lab 1.3 Track Your Work hide01.ir.webm -


     1.11.1 Course Roadmap hide01.ir.webm -


     1.11.2 Asset Discovery Frameworks hide01.ir.webm -


     1.11.3 reNgine hide01.ir.webm -


     1.11.4 reNgine Tools hide01.ir.webm -


     1.11.5 Dashboard of Results hide01.ir.webm -


     1.11.6 Scaling Discovery hide01.ir.webm -


     1.11.7 Lab 1.4 Track Your Work hide01.ir.webm -


     1.12.1 Course Roadmap hide01.ir.webm -


     1.12.10 File Secrets Format hide01.ir.webm -


     1.12.11 Subset of Useful Strings to Search For hide01.ir.webm -


     1.12.12 .env Example hide01.ir.webm -


     1.12.13 Where to Hunt for Keys hide01.ir.webm -


     1.12.14 Hunting for Keys hide01.ir.webm -


     1.12.15 Summary hide01.ir.webm -


     1.12.16 Contacts and Resources hide01.ir.webm -


     1.12.2 Authentication Type hide01.ir.webm -


     1.12.3 Authentication Differences hide01.ir.webm -


     1.12.4 Authentication and Key Material - AWS hide01.ir.webm -


     1.12.5 AWS Access Keys hide01.ir.webm -


     1.12.6 Login Endpoint - AWS hide01.ir.webm -


     1.12.7 Authentication and Key Material - Azure hide01.ir.webm -


     1.12.8 Azure Tools hide01.ir.webm -


     1.12.9 Searching for Key Material hide01.ir.webm -


     1.2.1 Course Roadmap hide01.ir.webm -


     1.2.2 Scoping and Engagement Methodology hide01.ir.webm -


     1.2.3 Cloud Penetration Testing Scenarios hide01.ir.webm -


     1.2.4 MITRE ATTACK Matrices - Enterprise hide01.ir.webm -


     1.2.5 MITRE ATTACK - Cloud Matrix hide01.ir.webm -


     1.2.6 SANS Traditional Penetration Testing Methodology hide01.ir.webm -


     1.2.7 SANS Cloud Penetration Testing Methodology hide01.ir.webm -


     1.3.1 Course Roadmap hide01.ir.webm -


     1.3.10 AWS Restrictions hide01.ir.webm -


     1.3.11 Azure Policies hide01.ir.webm -


     1.3.12 Azure Terms of Service - Scope hide01.ir.webm -


     1.3.13 Azure Policies - Rules and Permissions hide01.ir.webm -


     1.3.14 Azure Policies - Restrictions hide01.ir.webm -


     1.3.15 Google Cloud Testing hide01.ir.webm -


     1.3.2 Terms of Service and Demarcation Points hide01.ir.webm -


     1.3.3 Shared Responsibility and Pen Testing hide01.ir.webm -


     1.3.4 Types of Clouds hide01.ir.webm -


     1.3.5 Attacking Software as a Service hide01.ir.webm -


     1.3.6 Attacking Platform as a Service hide01.ir.webm -


     1.3.7 The Attackers View of IaaS hide01.ir.webm -


     1.3.8 Testing Policies of Public Cloud Service Providers hide01.ir.webm -


     1.3.9 Access Cloud Service Providers - Amazon hide01.ir.webm -


     1.4..10 ACME and Lets Encrypt hide01.ir.webm -


     1.4.1 Course Roadmap hide01.ir.webm -


     1.4.11 Certificate Transparency for Host Discovery hide01.ir.webm -


     1.4.12 Hosts through Certificates hide01.ir.webm -


     1.4.13 Hostnames and CNAMEs for Technology Discovery hide01.ir.webm -


     1.4.14 DNS Hygiene Issues - Subdomain Hijacks hide01.ir.webm -


     1.4.15 Example Subdomain Takeover hide01.ir.webm -


     1.4.16 Leveraging Existing Patterns hide01.ir.webm -


     1.4.2 Discovery hide01.ir.webm -


     1.4.3 Building an Asset Collection Pipeline hide01.ir.webm -


     1.4.4 Asset Collection Pipeline Wire Diagram hide01.ir.webm -


     1.4.5 How Can We Use this Data hide01.ir.webm -


     1.4.6 Seed Values - Domains hide01.ir.webm -


     1.4.7 Domains and Host Discovery hide01.ir.webm -


     1.4.8 Datasources and APIs hide01.ir.webm -


     1.4.9 Passive Technique - Certificate Transparency hide01.ir.webm -


     1.5.1 Course Roadmap hide01.ir.webm -


     1.5.10 Pure DNS Usage hide01.ir.webm -


     1.5.11 OWASP Armass hide01.ir.webm -


     1.5.2 Domain Enumeration Tools hide01.ir.webm -


     1.5.3 Subfinder hide01.ir.webm -


     1.5.4 Running Subfinder hide01.ir.webm -


     1.5.5 Subfinder Configuration File hide01.ir.webm -


     1.5.6 DNSx hide01.ir.webm -


     1.5.7 Running DNSx hide01.ir.webm -


     1.5.8 Intro - MassDNS hide01.ir.webm -


     1.5.9 PureDNS hide01.ir.webm -


     1.6.1 Course Roadmap hide01.ir.webm -


     1.6.10 How to use ngrok hide01.ir.webm -


     1.6.11 Target Discovery hide01.ir.webm -


     1.6.12 Recommendations for Labs hide01.ir.webm -


     1.6.2 Lab Introduction hide01.ir.webm -


     1.6.3 Class Notes hide01.ir.webm -


     1.6.4 How are these Items Used hide01.ir.webm -


     1.6.5 Solutions to Connectivity Challenges hide01.ir.webm -


     1.6.6 ngrok hide01.ir.webm -


     1.6.7 ngrok Connectivity hide01.ir.webm -


     1.6.8 ngrok HTTP Redirection hide01.ir.webm -


     1.6.9 ngrok Options hide01.ir.webm -


     1.7.1 Course Roadmap hide01.ir.webm -


     1.7.10 Masscan Testing Theoretical Limit hide01.ir.webm -


     1.7.11 Masscan TCP Connections vs NMAP hide01.ir.webm -


     1.7.12 Masscan Workflow hide01.ir.webm -


     1.7.13 Masscan Followed Up by Nmap hide01.ir.webm -


     1.7.14 Nmap Tour hide01.ir.webm -


     1.7.15 Nmap NSE hide01.ir.webm -


     1.7.16 Masscan Nmap Workflow hide01.ir.webm -


     1.7.17 Scancannon hide01.ir.webm -


     1.7.18 Naabu hide01.ir.webm -


     1.7.19 Scanning Best Practices hide01.ir.webm -


     1.7.2 IP Addressing and Hosts hide01.ir.webm -


     1.7.20 External Port Scanning hide01.ir.webm -


     1.7.21 Lab 1.2 Track Your Work hide01.ir.webm -


     1.7.3 Mapping to Technologies hide01.ir.webm -


     1.7.4 Host Discovery Continued - IP Addresses hide01.ir.webm -


     1.7.5 Cloud Service Provider Mappings hide01.ir.webm -


     1.7.6 Edge hide01.ir.webm -


     1.7.7 Port Scanning at Web Scale hide01.ir.webm -


     1.7.8 Masscan Default Syntax hide01.ir.webm -


     1.7.9 Masscan Scanning Options hide01.ir.webm -


     1.8.1 Course Roadmap hide01.ir.webm -


     1.8.2 Mapping URLs hide01.ir.webm -


     1.8.3 Mapping Azure URLs (1) hide01.ir.webm -


     1.8.4 Mapping Azure URLs (2) hide01.ir.webm -


     1.8.5 Building Good Wordlists hide01.ir.webm -


     1.8.6 Commonspeak2 Queries hide01.ir.webm -


     1.8.7 Commonspeak2 Commands hide01.ir.webm -


     1.8.8 Commonspeak2 Example of Subdomain Query hide01.ir.webm -


     1.8.9 Wordlists.assetnote.io hide01.ir.webm -


     1.9..1 Course Roadmap hide01.ir.webm -


     1.9..2 Vulnerabilites in Cloud Apps hide01.ir.webm -


     1.9..3 Nuclei hide01.ir.webm -


     1.9..4 Running Nuclei hide01.ir.webm -


     1.9..5 Nuclei Templates hide01.ir.webm -


     1.9..6 Nuclei Advanced Usage hide01.ir.webm -


     1.9..7 Nuclei Advanced Examples hide01.ir.webm -


     2.1.1 Attacking Identity Systems hide01.ir.webm -


     2.1.10 Flow Types hide01.ir.webm -


     2.1.11 OpenID Connect hide01.ir.webm -


     2.1.12 JSON Web Tokens (JWT) hide01.ir.webm -


     2.1.13 Attackers View of JWT hide01.ir.webm -


     2.1.14 Claims hide01.ir.webm -


     2.1.15 OpenID Connect Authorization Code Flow hide01.ir.webm -


     2.1.16 OpenID Connect Authorization Token Exchange hide01.ir.webm -


     2.1.17 APUI Authentication hide01.ir.webm -


     2.1.18 SAML hide01.ir.webm -


     2.1.19 Identifying SAML hide01.ir.webm -


     2.1.2 Table Of Contents (1) hide01.ir.webm -


     2.1.20 Example SAML Message hide01.ir.webm -


     2.1.21 Attackers View of SAML hide01.ir.webm -


     2.1.22 SAML Workflows hide01.ir.webm -


     2.1.23 Web Authentication (WebAuthN) hide01.ir.webm -


     2.1.24 Passkeys hide01.ir.webm -


     2.1.3 Table of Contents (2) hide01.ir.webm -


     2.1.4 Course Roadmap hide01.ir.webm -


     2.1.5 Why Focus on Authentication Standards hide01.ir.webm -


     2.1.6 Web Authentication Standards hide01.ir.webm -


     2.1.7 Why Oauth hide01.ir.webm -


     2.1.8 Oauth 2.0 Terminology (1) hide01.ir.webm -


     2.1.9 Oauth 2.0 Terminology (2) hide01.ir.webm -


     2.10..2 Why learn the CLI Tools hide01.ir.webm -


     2.10.1 Course Roadmap hide01.ir.webm -


     2.10.3 AWS CLI hide01.ir.webm -


     2.10.4 AWS Authentication hide01.ir.webm -


     2.10.5 AWS CLI Options hide01.ir.webm -


     2.10.6 Working with AWS Services hide01.ir.webm -


     2.10.7 Handling Output hide01.ir.webm -


     2.10.8 Azure CLI hide01.ir.webm -


     2.10.9 Azure Login Options hide01.ir.webm -


     2.11.1 Course Roadmap hide01.ir.webm -


     2.11.2 JMESPath Queries hide01.ir.webm -


     2.11.3 Parsing JSON Output in CLI hide01.ir.webm -


     2.11.4 Combining AWS and JQ hide01.ir.webm -


     2.11.5 CLI Tools hide01.ir.webm -


     2.11.6 Summary hide01.ir.webm -


     2.11.7 Contacts and Resources hide01.ir.webm -


     2.2.1 Course Roadmap hide01.ir.webm -


     2.2.10 AWS Cognito hide01.ir.webm -


     2.2.11 AWS Cognito Username Harvesting hide01.ir.webm -


     2.2.2 Identity is the New Perimeter hide01.ir.webm -


     2.2.3 Multiple Authentication Types hide01.ir.webm -


     2.2.4 Strategizing your Attack hide01.ir.webm -


     2.2.5 Username Harvesting in the Cloud hide01.ir.webm -


     2.2.6 IdPs Making Harvesting Easier hide01.ir.webm -


     2.2.7 Okta Example hide01.ir.webm -


     2.2.8 Entra ID Examples hide01.ir.webm -


     2.2.9 Microsoft Authentication Endpoints hide01.ir.webm -


     2.3.1 Course Roadmap hide01.ir.webm -


     2.3.2 Username Structures hide01.ir.webm -


     2.3.3 Account Attack Methodology hide01.ir.webm -


     2.3.4 Tools hide01.ir.webm -


     2.3.5 CeWL and Custom Wordlists hide01.ir.webm -


     2.3.6 ADD-Internals hide01.ir.webm -


     2.3.7 TeamFiltration hide01.ir.webm -


     2.3.8 TeamFiltration Enumeration hide01.ir.webm -


     2.3.9 Finding Valid Users hide01.ir.webm -


     2.4.1 Course Roadmap hide01.ir.webm -


     2.4.10 Password Attack Tools hide01.ir.webm -


     2.4.11 Smart Lockout and Shunning hide01.ir.webm -


     2.4.12 Amazon API Gateway hide01.ir.webm -


     2.4.13 Fireprox hide01.ir.webm -


     2.4.14 Running Fireprox hide01.ir.webm -


     2.4.15 Teamfiltration Password Spray hide01.ir.webm -


     2.4.16 Password Attacks hide01.ir.webm -


     2.4.2 Passwords hide01.ir.webm -


     2.4.3 Multiple Attack Methods for Passwords hide01.ir.webm -


     2.4.4 Password Lists and Wordlists hide01.ir.webm -


     2.4.5 Password Attack Types and Methodology hide01.ir.webm -


     2.4.6 Mounting a Brute Force Attack hide01.ir.webm -


     2.4.7 Mounting a Password Spraying attack hide01.ir.webm -


     2.4.8 Mounting a Credential Stuffing Attack hide01.ir.webm -


     2.4.9 Tips for Different Types of Attacks hide01.ir.webm -


     2.5.1 Course Roadmap hide01.ir.webm -


     2.5.10 IAM Policy Example hide01.ir.webm -


     2.5.11 AWS IAM Visualized hide01.ir.webm -


     2.5.12 Identity vs Resource Policies hide01.ir.webm -


     2.5.13 Policy Boundaries hide01.ir.webm -


     2.5.14 Policies for Services hide01.ir.webm -


     2.5.15 Attribute-Based access Control hide01.ir.webm -


     2.5.16 AssumeRole hide01.ir.webm -


     2.5.2 AWS Terminology and IAM hide01.ir.webm -


     2.5.3 Amazon ARN hide01.ir.webm -


     2.5.4 How Cloud Resources are Referenced hide01.ir.webm -


     2.5.5 Amazon IAM hide01.ir.webm -


     2.5.6 Amazon AWS Root User hide01.ir.webm -


     2.5.7 IAM Defaults hide01.ir.webm -


     2.5.8 Identity Types on AWS hide01.ir.webm -


     2.5.9 AWS Policy Evaluation Logic hide01.ir.webm -


     2.6.1 Course Roadmap hide01.ir.webm -


     2.6.10 Entra Domain Services hide01.ir.webm -


     2.6.2 Introduction to Microsoft Cloud Services hide01.ir.webm -


     2.6.3 Comparison of Service Names between Each Provider hide01.ir.webm -


     2.6.4 On Premises, Azure, and AWS Role Comparisons hide01.ir.webm -


     2.6.5 Microsoft Identity Services hide01.ir.webm -


     2.6.6 High-Level View of Identity in Microsoft hide01.ir.webm -


     2.6.7 Microsoft Traditional Active Directory hide01.ir.webm -


     2.6.8 Microsoft Active Directory Federation Services hide01.ir.webm -


     2.6.9 Entra ID hide01.ir.webm -


     2.7.1 Course Roadmap hide01.ir.webm -


     2.7.10 Azure Scopes and Entra ID hide01.ir.webm -


     2.7.11 Entra ID Administrator Roles hide01.ir.webm -


     2.7.12 Entra ID Scope and Inheritance hide01.ir.webm -


     2.7.13 Entra ID Roles Viewed hide01.ir.webm -


     2.7.14 Azure RBAC vs Entra ID Admins vs Cross Platform Admins hide01.ir.webm -


     2.7.15 Entra ID Privilege Escalation hide01.ir.webm -


     2.7.2 The Hackers Guide to Entra ID hide01.ir.webm -


     2.7.3 Hybrid Options hide01.ir.webm -


     2.7.4 Different Types of Hybrid Authentications hide01.ir.webm -


     2.7.5 Hybrid Caveats hide01.ir.webm -


     2.7.6 Entra ID Roles hide01.ir.webm -


     2.7.7 Entra Domain Services hide01.ir.webm -


     2.7.8 Attackers View of Identity Services in Azure hide01.ir.webm -


     2.7.9 Azure RBAC Roles hide01.ir.webm -


     2.8.1 Course Roadmap hide01.ir.webm -


     2.8.10 Mounting an Attack - Setup hide01.ir.webm -


     2.8.11 Register an App hide01.ir.webm -


     2.8.12 O365-Attack-Toolkit hide01.ir.webm -


     2.8.13 App Consent and Graph hide01.ir.webm -


     2.8.2 Entra ID and Applications hide01.ir.webm -


     2.8.3 Entra ID Permissions hide01.ir.webm -


     2.8.4 Consent and Permissions hide01.ir.webm -


     2.8.5 Microsoft Graph Introduction hide01.ir.webm -


     2.8.6 Microsoft Graph Constraints hide01.ir.webm -


     2.8.7 Postman and Microsoft GRAPH hide01.ir.webm -


     2.8.8 Microsoft Graph Permission Example hide01.ir.webm -


     2.8.9 Using the Graph API for Search hide01.ir.webm -


     2.9.1 Course Roadmap hide01.ir.webm -


     2.9.10 Azure Files and Azure Blobs hide01.ir.webm -


     2.9.11 Tools to Enumerate Azure Blobs hide01.ir.webm -


     2.9.12 Hunting for Open File Shares hide01.ir.webm -


     2.9.2 File Storage Enviroments in the Cloud hide01.ir.webm -


     2.9.3 Authenticated Access vs Authorized Access hide01.ir.webm -


     2.9.4 Common Resource Policy Issues hide01.ir.webm -


     2.9.5 Scenario - Public Access hide01.ir.webm -


     2.9.6 Scenario - Authenticated Access hide01.ir.webm -


     2.9.7 Scenario - Authorized Access hide01.ir.webm -


     2.9.8 Looking for Unauthenticated File Shares hide01.ir.webm -


     2.9.9 AWS S3 Bucket Hunting hide01.ir.webm -


     3.1.1 Attacking and Abusing Cloud Services hide01.ir.webm -


     3.1.10 Running CloudFox hide01.ir.webm -


     3.1.11 CloudFox Output hide01.ir.webm -


     3.1.12 CloudFox Loot hide01.ir.webm -


     3.1.13 Internal Cloud Enumeration hide01.ir.webm -


     3.1.2 Table of Contents (1) hide01.ir.webm -


     3.1.3 Table of Contents (2) hide01.ir.webm -


     3.1.4 Course Roadmap hide01.ir.webm -


     3.1.5 Internal Enumeration hide01.ir.webm -


     3.1.6 ScoutSuite hide01.ir.webm -


     3.1.7 Running ScoutSuite hide01.ir.webm -


     3.1.8 ScoutSuite Reports hide01.ir.webm -


     3.1.9 CloudFox hide01.ir.webm -


     3.10.1 Course Roadmap hide01.ir.webm -


     3.10.2 Azure Compute hide01.ir.webm -


     3.10.3 Azure Virtual Machines - Backdooring Systems hide01.ir.webm -


     3.10.4 Another Compute Attack Scenario hide01.ir.webm -


     3.10.5 Working with Disks in Azure hide01.ir.webm -


     3.10.6 Azure Storage Explorer hide01.ir.webm -


     3.10.7 Azure VMs hide01.ir.webm -


     3.11.1 Course Roadmap hide01.ir.webm -


     3.11.10 Summary hide01.ir.webm -


     3.11.11 Contacts and Resources hide01.ir.webm -


     3.11.2 Code Execution on Windows hide01.ir.webm -


     3.11.3 Custom Script Extension hide01.ir.webm -


     3.11.4 Executing Commands through Run-Command hide01.ir.webm -


     3.11.5 Run-Command Caveats hide01.ir.webm -


     3.11.6 Hybrid Workers hide01.ir.webm -


     3.11.7 Hybrid Workers - Watchers hide01.ir.webm -


     3.11.8 WinRM hide01.ir.webm -


     3.11.9 Running Commands on Azure VMs hide01.ir.webm -


     3.2.1 Course Roadmap hide01.ir.webm -


     3.2.2 IAM and Privlege Escaltion Issues hide01.ir.webm -


     3.2.3 Classic Priv vs Cloud Priv Esc hide01.ir.webm -


     3.2.4 IAM User Versioning (1) hide01.ir.webm -


     3.2.5 IAM User Versioning (2) hide01.ir.webm -


     3.2.6 IAM User Versioning (3) hide01.ir.webm -


     3.2.7 IAM Passrole hide01.ir.webm -


     3.3.1 Course Roadmap hide01.ir.webm -


     3.3.2 AWS Compute hide01.ir.webm -


     3.3.3 EC2 Properties hide01.ir.webm -


     3.3.4 AWS Instance Metadata Service hide01.ir.webm -


     3.3.5 AWS Session Tokens hide01.ir.webm -


     3.3.6 AWS Metadata Session Tokens v2 hide01.ir.webm -


     3.3.7 Attacker Paths Utlizing EC2 hide01.ir.webm -


     3.4.1 Course Roadmap hide01.ir.webm -


     3.4.2 Compute Attack Scenarios hide01.ir.webm -


     3.4.3 Routing through Compute hide01.ir.webm -


     3.4.4 EC2 Callback hide01.ir.webm -


     3.4.5 Lambda as a Vesctor hide01.ir.webm -


     3.4.6 EC2 Userdata hide01.ir.webm -


     3.4.7 EC2 Userdata Workflow hide01.ir.webm -


     3.4.8 EC2 Attack Setup hide01.ir.webm -


     3.5.1 Course Roadmap hide01.ir.webm -


     3.5.2 Intorduction to Pacu hide01.ir.webm -


     3.5.3 Pacu Interface hide01.ir.webm -


     3.5.4 Pacu Module Dependancy and Permission Dependancy hide01.ir.webm -


     3.5.5 Pacu Recon Modules - Unauthenticated hide01.ir.webm -


     3.5.6 Pacu Enumeration Modules hide01.ir.webm -


     3.5.7 Pacu Escalate and Lateral Move hide01.ir.webm -


     3.5.8 Pacu Exploits hide01.ir.webm -


     3.5.9 Pacu Evasions hide01.ir.webm -


     3.6.1 Course Roadmap hide01.ir.webm -


     3.6.2 Intro to Callbacks and Shells hide01.ir.webm -


     3.6.3 Introduction to Socat hide01.ir.webm -


     3.6.4 SOCAT Address Format hide01.ir.webm -


     3.6.5 Socat Examples hide01.ir.webm -


     3.6.6 Redirections of Other Pivots hide01.ir.webm -


     3.6.7 Using Port Proxies and Built-in tools hide01.ir.webm -


     3.6.8 IPTABLES as a Redirection tool hide01.ir.webm -


     3.6.9 Windows Portproxy hide01.ir.webm -


     3.7.1 Course Roadmap hide01.ir.webm -


     3.7.2 Silver hide01.ir.webm -


     3.7.3 Implant Creation hide01.ir.webm -


     3.7.4 Interacting with Implants hide01.ir.webm -


     3.7.5 Silver Post-Exploitation hide01.ir.webm -


     3.7.6 Using SOCKS in Operations hide01.ir.webm -


     3.7.7 ProxyChains hide01.ir.webm -


     3.8.1 Course Roadmap hide01.ir.webm -


     3.8.2 Amazon KMS hide01.ir.webm -


     3.8.3 Amazon KMS Use Cases hide01.ir.webm -


     3.8.4 KMS Encrypt Decrypt Behavior hide01.ir.webm -


     3.8.5 End-to-End AWS Scenario hide01.ir.webm -


     3.9.1 Course Roadmap hide01.ir.webm -


     3.9.2 AWS Confused Deputy hide01.ir.webm -


     3.9.3 How to Confuse the Deputy hide01.ir.webm -


     3.9.4 AssumeRole hide01.ir.webm -


     3.9.5 AssumeRole with Confused Deputy hide01.ir.webm -


     3.9.6 Assume Role hide01.ir.webm -


     4.1.1 Vulnerabilities in Cloud-Native Applications hide01.ir.webm -


     4.1.10 How Cloud Applications Talk - Cloud Native hide01.ir.webm -


     4.1.2 Table of Contents (1) hide01.ir.webm -


     4.1.3 Table of Contents (2) hide01.ir.webm -


     4.1.4 Course Roadmap hide01.ir.webm -


     4.1.5 Introduction to Cloud-Native Attacks hide01.ir.webm -


     4.1.6 Cloud-Native Applications hide01.ir.webm -


     4.1.7 Cloud-Native Application Architectures hide01.ir.webm -


     4.1.8 CNCF Trail Map hide01.ir.webm -


     4.1.9 How Applications Talk - Classic hide01.ir.webm -


     4.10.1 Course Roadmap hide01.ir.webm -


     4.10.10 SQL Injection Visualized in NodeJS (4) hide01.ir.webm -


     4.10.11 SQLmap.py hide01.ir.webm -


     4.10.12 SQLmap and Cloud Applications hide01.ir.webm -


     4.10.13 Sqlmap Examples hide01.ir.webm -


     4.10.14 SQL Injection Defenses hide01.ir.webm -


     4.10.15 Databases hide01.ir.webm -


     4.10.16 Summary hide01.ir.webm -


     4.10.17 Contacts and Resources hide01.ir.webm -


     4.10.2 SQL Injection in a Hosted Enviroment hide01.ir.webm -


     4.10.3 Amazon RDS and Aurora hide01.ir.webm -


     4.10.4 RDS Design hide01.ir.webm -


     4.10.5 SQL Injection hide01.ir.webm -


     4.10.6 SQL Injection Workflow hide01.ir.webm -


     4.10.7 SQL Injection Visualized in NodeJS (1) hide01.ir.webm -


     4.10.8 SQL Injection Visualized in NodeJS (2) hide01.ir.webm -


     4.10.9 SQL Injection Visualized in NodeJS (3) hide01.ir.webm -


     4.2.1 Course Roadmap hide01.ir.webm -


     4.2.2 Mapping Visualized hide01.ir.webm -


     4.2.3 Application Mapping vs Infrastructure Mapping hide01.ir.webm -


     4.2.4 HTTP Request Review - HTML hide01.ir.webm -


     4.2.5 HTTP Request Review - JSON hide01.ir.webm -


     4.2.6 Client-Side Mappings hide01.ir.webm -


     4.3.1 Course Roadmap hide01.ir.webm -


     4.3.2 Infrastructure as Code hide01.ir.webm -


     4.3.3 Terraform hide01.ir.webm -


     4.3.4 Attacking Terraform hide01.ir.webm -


     4.3.5 Terraform State File hide01.ir.webm -


     4.3.6 Terraform State Files hide01.ir.webm -


     4.4.1 Course Roadmap hide01.ir.webm -


     4.4.10 Travis Example hide01.ir.webm -


     4.4.11 Travis Configuration Files hide01.ir.webm -


     4.4.12 Using Travis to Move Laterally hide01.ir.webm -


     4.4.13 Tips on Output hide01.ir.webm -


     4.4.14 Several use Cases hide01.ir.webm -


     4.4.15 Example Scripts hide01.ir.webm -


     4.4.16 Abusing CI CD Pipelines hide01.ir.webm -


     4.4.2 Development Pipeline and Attacks hide01.ir.webm -


     4.4.3 Git hide01.ir.webm -


     4.4.4 Deployment Pipelines hide01.ir.webm -


     4.4.5 Gitops hide01.ir.webm -


     4.4.6 Nobelium Case Study hide01.ir.webm -


     4.4.7 Build Systems hide01.ir.webm -


     4.4.8 Detecting CI CD Tools hide01.ir.webm -


     4.4.9 Attacking CI CD hide01.ir.webm -


     4.5.1 Course Roadmap hide01.ir.webm -


     4.5.2 Web Application Injections hide01.ir.webm -


     4.5.3 Injections hide01.ir.webm -


     4.6.1 Course Roadmap hide01.ir.webm -


     4.6.2 Server-Side Request Forgery (SSRF) hide01.ir.webm -


     4.6.3 Why are SSRFs Popular again hide01.ir.webm -


     4.6.4 SSRF Discovery hide01.ir.webm -


     4.6.5 SSRF Implications hide01.ir.webm -


     4.6.6 Metadata v2 token Protections hide01.ir.webm -


     4.6.7 Are SSRF Solved in the Cloud hide01.ir.webm -


     4.6.8 SSRFs in the Wild hide01.ir.webm -


     4.6.9 SSRF Attack Lab hide01.ir.webm -


     4.7.1 Course Roadmap hide01.ir.webm -


     4.7.10 Command-Line Injection hide01.ir.webm -


     4.7.2 Command-Line Execution in a Web Application hide01.ir.webm -


     4.7.3 Command-Line Execution Example hide01.ir.webm -


     4.7.4 Exploiting Command Injection hide01.ir.webm -


     4.7.5 Command Injection Primitives hide01.ir.webm -


     4.7.6 Command Injection and Cloud Native hide01.ir.webm -


     4.7.7 Finding Command Injection hide01.ir.webm -


     4.7.8 Command-Line Injection vs RCE hide01.ir.webm -


     4.7.9 SSJI hide01.ir.webm -


     4.8.1 Course Roadmap hide01.ir.webm -


     4.8.10 Azure Serverless hide01.ir.webm -


     4.8.11 Attackers View of Windows Functions hide01.ir.webm -


     4.8.12 Attacking Serverless Functions hide01.ir.webm -


     4.8.13 Serverless Functions hide01.ir.webm -


     4.8.2 Serverless Function Attacks hide01.ir.webm -


     4.8.3 AWS Lambda hide01.ir.webm -


     4.8.4 AWS Lambda Constraints hide01.ir.webm -


     4.8.5 NodeJS Lambda Example - JavaScript hide01.ir.webm -


     4.8.6 Lambda Limitations hide01.ir.webm -


     4.8.7 Executing Lambda Functions Manually hide01.ir.webm -


     4.8.8 Exploits in Lambda Software hide01.ir.webm -


     4.8.9 AWS Lambda Shells hide01.ir.webm -


     4.9.1 Course Roadmap hide01.ir.webm -


     4.9.10 Impact of Exposing these Injections hide01.ir.webm -


     4.9.11 SQL vs MongoDB - A Primer hide01.ir.webm -


     4.9.12 MongoDB Command Cheat Sheet hide01.ir.webm -


     4.9.2 Exposed Databases hide01.ir.webm -


     4.9.3 Discovering Exposed Services hide01.ir.webm -


     4.9.4 Databases in the Cloud hide01.ir.webm -


     4.9.5 Paid Extras - Redis Labs hide01.ir.webm -


     4.9.6 A Word on SQL Injection vs NoSQL Injection hide01.ir.webm -


     4.9.7 Connecting to Cloud Databases hide01.ir.webm -


     4.9.8 Exposed Databases - Why Does this Matter (1) hide01.ir.webm -


     4.9.9 Exposed Databases - Why Does this Matter (2) hide01.ir.webm -


     5.1.1 Infrastructure Attacks and Red Teaming hide01.ir.webm -


     5.1.10 Data Pivoting Options hide01.ir.webm -


     5.1.11 AWS Cross-Account Copies hide01.ir.webm -


     5.1.12 Attacker Account IAM Permissions hide01.ir.webm -


     5.1.13 Exfiltration between Buckets hide01.ir.webm -


     5.1.14 Azure Cross-Account Copies hide01.ir.webm -


     5.1.15 Smuggling with Enterprise Tools hide01.ir.webm -


     5.1.16 Microsoft OneDrive hide01.ir.webm -


     5.1.17 snaffpoint hide01.ir.webm -


     5.1.2 Table of Contents hide01.ir.webm -


     5.1.3 Course Roadmap hide01.ir.webm -


     5.1.4 Red Team Ops in the Cloud hide01.ir.webm -


     5.1.5 Why Discuss Red Team hide01.ir.webm -


     5.1.6 Red Team and the Cloud hide01.ir.webm -


     5.1.7 Difficulty in Blocking Cloud Service Providers hide01.ir.webm -


     5.1.8 Leverage CSP Networking Options hide01.ir.webm -


     5.1.9 ProxyCannon-NG hide01.ir.webm -


     5.2.1 Course Roadmap hide01.ir.webm -


     5.2.10 Using Valid Credentials in Metasploit hide01.ir.webm -


     5.2.2 Obfuscation of C2 Infrastructure hide01.ir.webm -


     5.2.3 Finding Valid Domain with Domain Hunter hide01.ir.webm -


     5.2.4 Domain Hunter Syntax hide01.ir.webm -


     5.2.5 Buying Good Web Properties - Flippa hide01.ir.webm -


     5.2.6 Domain Fronting hide01.ir.webm -


     5.2.7 Domain Fronting Visualized hide01.ir.webm -


     5.2.8 Domain Fronting Methodology hide01.ir.webm -


     5.2.9 Metasploit and Valid Cryptography hide01.ir.webm -


     5.3.1 Course Roadmap hide01.ir.webm -


     5.3.10 How to Containers work hide01.ir.webm -


     5.3.11 Linux Containers Architecture hide01.ir.webm -


     5.3.12 How to Run Containers Natively hide01.ir.webm -


     5.3.2 Containers and Intrastructure (1) hide01.ir.webm -


     5.3.3 Intro to Containers hide01.ir.webm -


     5.3.4 Containers vs VMs - VMs hide01.ir.webm -


     5.3.5 Containers vs VMs - Containers hide01.ir.webm -


     5.3.6 Containers vs VMs - WASM+WASI hide01.ir.webm -


     5.3.7 Containers vs VMs - Unikernel hide01.ir.webm -


     5.3.8 Containers and Infrastructure (2) hide01.ir.webm -


     5.3.9 Software Packaging hide01.ir.webm -


     5.4.1 Course Roadmap hide01.ir.webm -


     5.4.10Microservices and Cloud-Native Applications hide01.ir.webm -


     5.4.11 Containers Intro hide01.ir.webm -


     5.4.2 Docker Introduction hide01.ir.webm -


     5.4.3 Docker Desktop Example hide01.ir.webm -


     5.4.4 Docker CLI hide01.ir.webm -


     5.4.5 Dockerfile hide01.ir.webm -


     5.4.6 Docker and Overlay2 hide01.ir.webm -


     5.4.7 Container Cross-Communication hide01.ir.webm -


     5.4.8 Docker Networking hide01.ir.webm -


     5.4.9 Container Networking hide01.ir.webm -


     5.5.1 Course Roadmap hide01.ir.webm -


     5.5.2 Docker Vulnerabilities hide01.ir.webm -


     5.5.3 Docker Capabilities hide01.ir.webm -


     5.5.4 Docker.sock hide01.ir.webm -


     5.5.5 Abusing Docker.sock hide01.ir.webm -


     5.5.6 Hardening Containers hide01.ir.webm -


     5.5.7 Assessing Docker hide01.ir.webm -


     5.6.1 Course Roadmao hide01.ir.webm -


     5.6.10 Kubernetes Control Plane hide01.ir.webm -


     5.6.11 RBAC hide01.ir.webm -


     5.6.12 Pods hide01.ir.webm -


     5.6.13 Privileged Pods hide01.ir.webm -


     5.6.14 Keeping Secrets in Kubernetes hide01.ir.webm -


     5.6.15 Tesla Example hide01.ir.webm -


     5.6.16 Kubeflow Dashboard hide01.ir.webm -


     5.6.17 Kubernetes Authorization Example hide01.ir.webm -


     5.6.18 RBAC Example hide01.ir.webm -


     5.6.19 Namespaces hide01.ir.webm -


     5.6.2 Kubernetes hide01.ir.webm -


     5.6.20 Network Attacks hide01.ir.webm -


     5.6.21 Vulnerabilty Hunting in Kubernetes hide01.ir.webm -


     5.6.22 Kubernetes and ScoutSuite hide01.ir.webm -


     5.6.23 Automated Attack with Peirates hide01.ir.webm -


     5.6.24 Peirates Options hide01.ir.webm -


     5.6.25 Kubernetes and Peirates hide01.ir.webm -


     5.6.3 Kubernetes Architecture (1) hide01.ir.webm -


     5.6.4 Kubernetes Architecture (2) hide01.ir.webm -


     5.6.5 Kubernetes Nodes hide01.ir.webm -


     5.6.6 Kubernetes Architecture (3) hide01.ir.webm -


     5.6.7 Tooling in Kubernetes hide01.ir.webm -


     5.6.8 Attackers View of the Kubernetes hide01.ir.webm -


     5.6.9 Types of Deployments hide01.ir.webm -


     5.7.1 Course Roadmap hide01.ir.webm -


     5.7.10 Contacts and Resources hide01.ir.webm -


     5.7.2 Implanting Backdoor in Containers hide01.ir.webm -


     5.7.3 Kubernetes and Payloads hide01.ir.webm -


     5.7.4 Backdoor Container Workflow hide01.ir.webm -


     5.7.5 Choosing Deployments in Kubernetes hide01.ir.webm -


     5.7.6 Example Deployment .yaml hide01.ir.webm -


     5.7.7 Backdooring Containers hide01.ir.webm -


     5.7.8 What is Next hide01.ir.webm -


     5.7.9 Summary hide01.ir.webm -


     6.1.1 Capstone Event hide01.ir.webm -


     6.1.2 Capstone Event Rules hide01.ir.webm -


     6.1.3 Course Resources and Contact Information hide01.ir.webm -


     hide01.ir -

Related torrents

Torrent Name	Added	Size	Seed	Leech	Health
SANS SEC588 - Cloud Penetration Testing (2023)	2025-09-14	6.3 GB	0	21

Note :

Feel free to post any comments about this torrent, including links to Subtitle, samples, screenshots, or any other relevant information. Watch SANS SEC588 - Cloud Penetration Testing (2023) Full Movie Online Free, Like 123Movies, FMovies, Putlocker, Netflix or Direct Download Torrent SANS SEC588 - Cloud Penetration Testing (2023) via Magnet Download Link.

Comments (0 Comments)

Please login or create a FREE account to post comments