all domains
Cloud Pentest
AWS/Azure/GCP attack surface. IMDS SSRF, IAM privesc, S3 misconfigs, K8s RBAC, CI/CD secrets.
0/16 modules · 0/4 levels complete · 0%
1
Cloud Fundamentals & Misconfigs
beginnerS3 public buckets, shared-key auth, default IAM roles, exposed metadata.
quizlablablab
0/4 done · 0%start
locked2
SSRF → IMDS → IAM Privesc
intermediateThe Capital One playbook. Webhook SSRF, IMDSv1 abuse, role assumption, S3 read.
lablablabquiz
0/4 done · 0%
locked3
Kubernetes & Container Escape
advancedServiceAccount tokens, pod-to-host escape, network-policy bypass, secrets exfil.
lablablabctf
0/4 done · 0%
locked4
CI/CD & Supply-Chain Attacks
expertBuild-pipeline poisoning, registry token theft, OIDC misconfig, supply-chain pivot.
lablablabquiz
0/4 done · 0%
Sign in to track your progress and unlock certificates.
sign in