In this 100% hands-on course, you will learn how to exploit AWS environments with misconfigured IAM policies, creating vulnerabilities that allow for privilege escalation exploits.
Who is this course for?
If you’ve never used AWS before, or if you are a complete beginner to AWS, you are not yet ready for this course. Instead, get familiar with AWS first — like by completing our Intro to AWS Security course and maybe also our Pentesting AWS course since that one provides a lot more detailed walkthroughs and explanations. Then come back here.
This course is considered beginner to intermediate level, meaning that the labs and challenges are easily solvable with a little bit of research, but they will require research especially if you’re not that familiar with the AWS CLI or AWS IAM.
Getting started
In the next lesson, I will be providing a few tips and tricks including useful IAM security tools you can use to speed up the process of finding vulnerabilities, but how you complete this course is entirely up to you. You can make it as hard or as easy as you’d like, or as automated or as manual as you’d like, and I encourage you to experiment and try different approaches within the hands-on labs.
Each of the learning labs provide solutions so if you get stuck you can reference those, or you can also compare how you solved the lab with how we recommend that you solve the lab since there are many valid approaches, and we show different approaches along the way.
Challenges
At the end of the course, your new skills will be tested with challenges. These challenges will provide minimal guidance and may require chaining multiple of the exploits you learn about to make it a little bit more difficult.
We will not be posting solutions to these challenges, but if you get stuck, please reach out in our Discord community for guidance. We won’t give you outright answers but we can point you in the right direction! That’s how you’ll learn!
Ready to get started?
So that’s it! That’s our intro to the course, I’ll see you there, let’s get started, good luck, and have fun!
E-course is free but is usefull for student who learn cloud computing