~ goodyAWS Cloud Detection Lab 1️⃣🪢🖇️: Cloud Pen-testing with Stratus Red Team toolAdvanced Persistent Threat (APT) actors are known for their sophisticated and continuous cyber-attacks targeting specific organizations…May 221
Hacktivist-AttackerCloud Buckets: Enumeration And Exploiting In Web Application Pentesting.In this Post we will Explore, How to Enumerate Cloud Buckets and Exploiting Them.Aug 61Aug 61
~ goodyAWS Cloud Detection Lab II: Emulation of APT attacks with Stratus Red Team toolIn the previous blog post, ‘Cloud Pen-testing with Stratus Red Team tool,’ we discussed the concept and installation guide for the Stratus…May 31May 31
BrainFlexJWT Assertion Abuse in AzureDISCLAIMER: Using these tools and methods against hosts for whom you do not have explicit permission to test is illegal. You are liable for…Jun 24Jun 24
~ goodyAWS Cloud Detection Lab 1️⃣🪢🖇️: Cloud Pen-testing with Stratus Red Team toolAdvanced Persistent Threat (APT) actors are known for their sophisticated and continuous cyber-attacks targeting specific organizations…May 221
Hacktivist-AttackerCloud Buckets: Enumeration And Exploiting In Web Application Pentesting.In this Post we will Explore, How to Enumerate Cloud Buckets and Exploiting Them.Aug 61
~ goodyAWS Cloud Detection Lab II: Emulation of APT attacks with Stratus Red Team toolIn the previous blog post, ‘Cloud Pen-testing with Stratus Red Team tool,’ we discussed the concept and installation guide for the Stratus…May 31
BrainFlexJWT Assertion Abuse in AzureDISCLAIMER: Using these tools and methods against hosts for whom you do not have explicit permission to test is illegal. You are liable for…Jun 24
Cyber AnomCloudGoat : iam_privesc_by_rollback walk-throughThis write-up walks you through the scenario,“iam_privesc_by_rollback” from Rhino Security Labs’ CloudGoat (link below).Feb 8, 2023
Melih TurhanlarAzure AD Penetration Test Initial Access Phase (Red Team on Azure AD)That will be short and to the point for Azure AD Penetration Test and Red Teaming. There are some ways of Phishing users in Azure AD and…Apr 12, 2023