Cloud Pentest
Beginner
Cloud Fundamentals & Misconfigs
S3 public buckets, shared-key auth, default IAM roles, exposed metadata.
0/4 modules complete · 0%
- 1Quiz+90 XP
Cloud 101 Quiz: AWS Security Fundamentals & Common Misconfigurations
Test your understanding of AWS security basics, shared responsibility model, IAM fundamentals, S3 bucket security, and instance metadata service exploitation.
open quiz - Hands-on Labeasy+30 XP
Public S3 Bucket Hunt
Brute-force common bucket names against a target org. One bucket is left world-readable.
complete the module above first - Hands-on Labeasy+25 XP
IAM Policy Audit
Audit a real-looking AWS account's IAM policies. Find the over-privileged one and exploit it.
complete the module above first - Hands-on Labeasy+30 XP
Default Creds in Cloud
A cloud-hosted Jenkins runs with default `admin:admin`. Get a shell.
complete the module above first
Sign in to track your progress.
sign in