AWS IAM Privilege Escalation Learning Path
- AWS
- Red Team
2 courses 19 hands-on labs
Path Overview
Master AWS IAM privilege escalation through hands-on learning designed for security professionals and cloud practitioners. This specialized path equips you with the practical skills to identify, exploit, and defend against common IAM vulnerabilities through real-world scenarios. Starting with essential IAM fundamentals and enumeration techniques, you’ll progress to executing actual privilege escalation attacks using multiple different IAM actions that are frequently misconfigured. The path culminates in challenging labs where you’ll apply your skills in realistic environments, extracting secret API keys and accessing protected military schematics. This 100% hands-on learning experience transforms abstract security concepts into practical expertise you can immediately apply to secure cloud environments and advance your cloud security career.
What You’ll Learn
- Identify and exploit AWS IAM privilege escalation attack paths
- Learn IAM enumeration techniques
- Execute hands-on attacks in realistic lab environments
- Learn how to access sensitive resources like Secrets Manager, KMS, and S3
- Complete real-world security challenges that simulate actual cloud penetration testing scenarios
- Think like an attacker to better secure AWS deployments against common security mistakes
Content
21 itemsIntroduction to AWS Enumeration
Course Hands-On LabsLearn the basics of AWS enumeration in this Hands-On Labs course. Enumeration is the process of identifying and cataloguing AWS resources and services in an environment. The purpose is to gain a comprehensive understanding of the AWS environment, which is a critical step in assessing its security posture. Enumeration is...
View ContentGetting Started with the AWS CLI
Hands-On LabView ContentIntroduction to AWS IAM Enumeration
Hands-On LabView ContentIntroduction to Secrets Manager Enumeration
Hands-On LabView ContentIntroduction to S3 Enumeration
Hands-On LabView ContentDiscover AWS Account ID via S3 Bucket
Hands-On LabLearn how to enumerate AWS account IDs with very limited access to S3 buckets. This lab simulates compromised credentials and makes use of a clever automated tool to reduce guesses from 1 trillion possible combinations down to only 120.
View ContentDiscover AWS Organization ID via S3 Bucket
Hands-On LabDiscover AWS Organization IDs by exploiting limited S3 bucket access. Using an automated approach, this lab demonstrates how to efficiently identify org IDs in just 360 attempts instead of brute-forcing 3.66 quadrillion combinations.
View ContentAWS IAM Privilege Escalation Labs
Course Hands-On LabsLearn first-hand how attackers exploit IAM misconfigurations in AWS with tactics pulled from real case studies. This course is entirely made up of 🧪 Hands-On Labs with different scenarios that will teach you how to exploit some of the most dangerous IAM privilege escalation weaknesses. The final section is made...
View ContentIAM CreateAccessKey PrivEsc
Hands-On LabView ContentIAM CreateLoginProfile PrivEsc
Hands-On LabView ContentIAM UpdateLoginProfile PrivEsc
Hands-On LabView ContentPrivilege Escalation via IAM Versions
Hands-On LabView ContentIAM AddUserToGroup PrivEsc
Hands-On LabView ContentIAM AttachUserPolicy PrivEsc
Hands-On LabView ContentIAM AttachGroupPolicy PrivEsc
Hands-On LabView ContentIAM PutUserPolicy PrivEsc
Hands-On LabView ContentIAM PutGroupPolicy PrivEsc
Hands-On LabView ContentIAM AttachRolePolicy PrivEsc
Hands-On LabView ContentIAM PutRolePolicy PrivEsc
Hands-On LabView ContentIAM Challenge - Secrets Unleashed
Hands-On LabView ContentIAM Challenge - Escape Room
Hands-On LabView Content
Ready to advance your cloud security skills?
Join thousands of security professionals who are building their skills with our practical cloud security training
Start Learning