Making Mistakes Publicly: Cloud Edition – Aviata Solo Flight Challenge Chapter 1

Tuesday, 16 Apr 2024 10:00AM EDT (16 Apr 2024 14:00 UTC)
Speaker: Moses Frost

Public Cloud Environments can make things, well, rather public. While there are ways to prevent this, and the cloud providers have made strides, retroactive changes are not a thing. As such, we still find very poorly configured environments today.

Join us for this first of eight workshops in the Aviata Solo Flight Challenge Workshop series. We will show you how to look at a target organization's misconfigured public items. This lab will begin by showing you how to obtain a user's account number; from here, you can further look for public items in different storage environments. Finally, you can take advantage and find additional things within the environment.

Each monthly workshop in the series is independent of the others. There are no technical or educational dependencies from one to the others.

Who Should Attend

This workshop is ideal for IT security professionals, network engineers, and system administrators who are focused on strengthening cloud security through effective penetration testing techniques.

Learning Objectives

Modeling attack groups that are currently untracked but are compromising cloud assets
Look at the attack surfaces and how to discover open buckets, open images, open snapshots which could lead to sensitive information leakage
Learn to how to detect and harden these environments

Scroll down for prerequisites and laptop requirements.

Login to Register

Aviata Cloud - Solo Flight Challenge

Prerequisite Knowledge

Comfortability in Linux Command Line
Basic Knowledge of AWS Administration
Basic Usage of running Terraform (build, apply, destroy)
System Administration usage in SSH
This workshop supports content and knowledge from SEC588: Cloud Penetration Testing

System Requirements

Amazon AWS Range

You must bring an AWS Account to launch a system and connect remotely. If you need an AWS account, you can create a free tier account with root access at https://aws.amazon.com/free/
You will need to be able to run Terraform locally and create objects within this account.
You will need a set of Access Keys to your account to move into the docker container

Local device

You must run a local version of Docker with/ X86 support on it. ARM processors such as Mac M1 are not going to be supported

Workshop Series

Follow the Aviata Cloud Solo Flight Challenge Workshop Series throughout 2024 with free monthly cloud security workshops that will walk you through how various knowledge and hands-on skills work together to create a secure cloud environment for your organization.

Related Content

January 22, 2024

SANS 2023 Multicloud Survey: Navigating the Complexities of Multiple Clouds

Multicloud adoption will continue to increase as organizations require increased agility, flexibility, choice, and scalability.

Kenneth G. Hartman

Coolest Careers Poster

Offensive Operations, Pen Testing, and Red Teaming

SANSがおすすめするサイバーセキュリティの仕事20選: アプリケーションペンテスター

アプリケーションペンテスターの主な業務や、スキルアップのためのSANSのおすすめのコースを紹介します！

Coolest Careers Poster

SANSがおすすめするサイバーセキュリティの仕事20選: クラウドセキュリティアナリスト

クラウドセキュリティアナリストの主な業務や、スキルアップのためのSANSのおすすめのコースを紹介します！