• Labs
    • Learning Paths
    • CybrBits
    • All Courses
    • Join Discord
    • Contact & Support
    • Blog
    • Cheat Sheets
    • Ebooks
    • Podcasts
    • Webinars
  • Pricing
    • Training
    • Hosted Labs
    • Consulting
Sign in Sign up
Pentesting AWS Environments with Pacu, CloudGoat, and ChatGPT

10 sections · 43 lessons

  • Video
  • Lab
  • Cheat sheet
  • Reading
  • Premium
  1. 1 Introduction
    1. Video: About the course and author Preview
    2. Video: About using CloudGoat, Pacu, and ChatGPT Preview
    3. Reading: Who this course is for Preview
    4. Reading: Important quick note on AWS resource pricing Preview
    5. Reading: [LAB] Create a billing alert to avoid surprise bills Preview
    6. Reading: We want your feedback Premium
  2. 2 Setting up our lab environment
    1. Reading: Read this before installing Pacu/CloudGoat! Premium
    2. Reading: [DEMO] CloudGoat [Option #1] Install with pipx Premium
    3. Video: [DEMO] CloudGoat Running with Docker Premium
    4. Reading: [DEMO] Pacu [Option #1] Install with pipx [Recommended] Premium
    5. Video: [DEMO] Pacu [Option #2] Use with Docker Premium
    6. Video: [DEMO] Configuring AWS access credentials for CloudGoat Premium
    7. Video: [DEMO] Configuring AWS access credentials Premium
  3. 3 Getting started with Pacu
    1. Video: Pacu Quick Start Guide Premium
  4. 4 IAM Privilege Escalation by Misconfiguration (Small / Easy)
    1. Cheat sheet: Scenario overview Premium
    2. Video: [DEMO] Admin privilege escalation demonstration Premium
    3. Video: [DEMO] Cleaning up our lab environment Premium
  5. 5 Vulnerable Lambda (Small / Easy)
    1. Video: Scenario overview Premium
    2. Video: [DEMO] Creating our lab environment Premium
    3. Video: [DEMO] Exploiting vulnerable Lambda functions for admin access Premium
    4. Video: [DEMO] Cleaning up our lab environment Premium
    5. Reading: [Cheat Sheet] Solution steps (CLI) Premium
    6. Lab: [LAB] [CTF] Lambda SQLi PrivEsc to Access Secret Premium
  6. 6 IAM Privilege Escalation by Rollback (Small / Easy)
    1. Video: Scenario overview Premium
    2. Video: [DEMO] Exploiting IAM versions Premium
    3. Video: [DEMO] Cleaning up our lab environment Premium
    4. Reading: [Cheat Sheet] Solution steps (CLI) Premium
    5. Lab: [LAB] [CTF] PrivEsc via IAM Version Rollback Premium
  7. 7 Cloud Breach via S3 (Small / Moderate)
    1. Video: Scenario walkthrough Premium
    2. Lab: [LAB] [DEMO] Exploiting EC2 to reach S3 Premium
    3. Video: Preventing this exploit Premium
    4. Reading: Cleaning up our lab environment Premium
    5. Reading: [Cheat Sheet] Solution steps (CLI) Premium
  8. 8 IMDSv2 Compromise (SMALL / MODERATE)
    1. Reading: Scenario walkthrough Premium
    2. Lab: [LAB] Compromise EC2 IMDSv2 with RCE Premium
    3. Reading: [Cheat Sheet] Solutions Steps (CLI) Premium
  9. 9 ECS Takeover (Medium / Moderate)
    1. Video: Scenario walkthrough Premium
    2. Video: [DEMO] ECS RCE exploit to get credentials Premium
    3. Video: [DEMO] ECS Takeover Premium
    4. Video: [DEMO] Cleaning up our lab environment Premium
    5. Reading: [Cheat Sheet] Solution steps (CLI) Premium
  10. 10 Wrap-up and Key Takeaways
    1. Reading: What's next? Premium
    2. Reading: We want your feedback Premium

Section 6 · IAM Privilege Escalation by Rollback (Small / Easy)

[DEMO] Exploiting IAM versions

Christophe Limpalair

Christophe Limpalair

Premium

This lesson is part of a Premium course

Join Premium to open it, along with every course, practice exam and hands-on lab on Cybr.

View Plans Already a member? Sign in
  • Video lessons with full transcripts
  • Hands-on labs in real cloud accounts
  • Practice exams with explanations
PreviousScenario overview
Next [DEMO] Cleaning up our lab environment