Exploiting Cloud Platforms

When to Use

• AWS, Azure, or GCP security assessment
• Cloud misconfiguration exploitation
• S3/Blob/Storage bucket hunting
• Cloud IAM privilege escalation
• Serverless function exploitation
• Cloud metadata service abuse

When NOT to Use

• On-premises Active Directory — use attacking-active-directory
• Container and Kubernetes internals — use exploiting-containers
• IaC and pipeline review from source — use auditing-supply-chain
• Investigating a cloud compromise — use responding-to-incidents
• Hardening an account's posture rather than attacking it — use hardening-cloud-posture