resources-cloud.md

Cloud Exploitation Resources

General

• • Home - Stratus Red Team
    • desc: Home - Stratus Red Team

• AADInternals.com
  • desc: AADInternals tools & guides

Tools

• arsenal of aws sec tools
• AWS API call that return credentials
• nccgroup/PMapper
• salesforce/cloudsplaining
• FSecureLABS/awspx
• nccgroup/ScoutSuite

• Gerenios/AADInternals
  • desc: AADInternals PowerShell module for administering Azure AD and Office 365
• rvrsh3ll/TokenTactics
  • desc: Azure JWT Token Manipulation Toolset
• initstring/cloud_enum
  • desc: Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
• (dafthack/MFASweep)[https://github.com/dafthack/MFASweep]
  • desc: AAD spray/recon
• Flangvik/TeamFiltration
  • desc: TeamFiltration is a cross-platform framework for enumerating, spraying, exfiltrating, and backdooring O365 AAD accounts
• NetSPI/MicroBurst
  • desc: A collection of scripts for assessing Microsoft Azure security
• nyxgeek/onedrive_user_enum
  • desc: onedrive user enumeration - pentest tool to enumerate valid o365 users
• google/gcp_scanner
  • desc: gcp recon tool
• BishopFox/cloudfox
  • desc: Automating situational awareness for cloud penetration tests.
• pushsecurity/saas-attacks
  • desc: Offensive security drives defensive security. We're sharing a collection of SaaS attack techniques to help defenders understand the threats they face. #nolockdown
• kind
  • desc: a tool for running local Kubernetes clusters using Docker container “nodes”
• peak/s5cmd
  • desc: Parallel S3 and local filesystem execution tool.

Labs

• BishopFox/cloudfoxable
  • desc: Create your own vulnerable by design AWS penetration testing playground

Spray

• blacklanternsecurity/TREVORspray
• MarkoH17/Spray365

Guides

• Well, That Escalated Quickly: Privilege Escalation in AWS - BishopFox
• Azure AD Introduction for Red Teamers
• AWS - Hacking the Cloud
• rootsecdev/Azure-Red-Team
• Azure Attack Paths - Cloudbrothers
  • desc: Azure Attack Paths - Cloudbrothers
• What to look for when reviewing a company's infrastructure | Marco Lancini's Blog
  • desc: What to look for when reviewing a company's infrastructure | Marco Lancini's Blog

• Hacking-the-Cloud/hackingthe.cloud
  • desc: An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
• 7 lesser-known AWS SSM Document techniques for code execution – Security Café
  • desc: 7 lesser-known AWS SSM Document techniques for code execution – Security Café