Introduction

Breaching AWS – Rules of Engagement

BAWS 00 – Introduction to AWS and AWS Security Services

BAWS 02 – AWS Subdomain Takeover

BAWS 03 – Enumeration & Command Execution via SSM

BAWS 04 – Abuse IAM User Roles, Instance Metadata & SNS

BAWS 05 – Capture Credentials from SNS Service

BAWS 06 – Get Remote Code Execution on a Lambda Function

BAWS 07 – Enumerate and Read Data from DynamoDB

BAWS 08 – Upload Malicious Image into ECR

BAWS 09 – AWS SSO Phishing Attack

BAWS 10 – Enumerate AWS IAM Identity Center Permissions

BAWS 11 – Enumerate AWS IAM Permission & Retrieve Secrets from Secret Manager

BAWS 12 – Utilising Rancher to Gain Shell Access to a Pod

BAWS 13 – Enumerate RDS and Retrieve the Final Flag

BAWS Bonus – AWS Defense