course overview
Overview
Whether you are an Architect, Developer, Pen Tester, Security or DevOps Engineer, or anyone with a need to understand and manage cloud security vulnerabilities, specifically in a Cloud and Cloud Native environment, understanding relevant hacking techniques, and knowing how to protect yourself from them is critical. Offensive Cloud Hacking, covers both the theory as well as the practical through a number of modern techniques that may be used to compromise various Cloud services and infrastructure.
Learners will be provided with numerous cloud security scripts and tools (some public and some NotSoPublic) will also be provided during the training, along with the student handouts. The course also comes with detailed answer sheets. That is a step by step walkthrough of how every exercise within the class needs to be solved. These answer sheets are also provided to students at the end of the class.
Who Should take this course;
Cloud Administrators, Developers, Solutions Architects, DevOps Engineers, SOC Analysts, Penetration Testers, Network Engineers, security professionals and enthusiasts and anyone who wants to take their offensive cloud hacking skills to the next level.
Skills Gained
Delegates will gain knowledge of offensive cloud security hacking tools and techniques, including attacking, exploiting a variety of Cloud services and infrastructure. You will play the part of the hacker, compromising serverless apps, cloud machines, storage and database services, dormant assets and resources. Including the opportunity to learn privilege escalation and pivoting techniques specific to cloud environments.
Prerequisites
Prior pen test / security experience is not a strict requirement, however, some knowledge of Cloud Services and familiarity with common command-line syntax will be beneficial.
Outline
OFFENSIVE CLOUD HACKING
INTRODUCTION TO CLOUD COMPUTING
ATTACKING CLOUD SERVICES
ENUMERATION OF CLOUDENVIRONMENTS
GAINING ENTRY VIA EXPOSED SERVICES
ATTACKING SPECIFIC CLOUD SERVICES
POST- EXPLOITATION
If you need training for 3 or more people, you should ask us about onsite training. Putting aside the obvious location benefit, content can be customised to better meet your business objectives and more can be covered than in a public classroom. Its a cost effective option. One on one training can be delivered too, at reasonable rates.
Submit an enquiry from any page on this site, and let us know you are interested in the requirements box, or simply mention it when we contact you.
All $ prices are in USD unless it’s a NZ or AU date
SPVC = Self Paced Virtual Class
LVC = Live Virtual Class
Our clients have included prestigious national organisations such as Oxford University Press, multi-national private corporations such as JP Morgan and HSBC, as well as public sector institutions such as the Department of Defence and the Department of Health.
