Blacksky Hailstorm (AWS)
BlackSky Hailstorm is a cloud penetration testing labs that features a wide-range of misconfigurations, common privilege escalation techniques, and attack paths seen in real engagements in AWS. It covers how to exploit the vulnerabilities, and importantly, how they can be mitigated.
Mega Multinational is a global leader in the Freight Logistics industry. They are not cloud native, but are looking to transition more infrastructure to AWS, in order to mitigate the perceived risks of hosting their own infrastructure. They have enlisted your services to perform an assessment of their cloud infrastructure, starting with the external IP address provided.
Prerequisites
- ✓Cloud infrastructure
- ✓Linux OS
- ✓Web and Network exploitation
Learning outcomes
- ✓AWS enumeration
- ✓Exploitation of serverless applications
- ✓Exploiting misconfigurations
- ✓Lateral movement
- ✓Local privilege escalation
- ✓Mitigation and best practices
- ✓Web application and API exploitation
