pwnedlabs.io | 公有云安全靶场 AWS free 篇
2024-7-14
| 2024-7-14
0  |  阅读时长 0 分钟
type
status
date
slug
summary
tags
category
icon
password
📝
这公有云安全靶场挺不错，有官方配套 WP，然后除了攻还有防，也很适合入门和进阶～ 每个靶场有相应的场景和 RealWorld 描述，也把一些诸如 BlackHat 的议题做成靶场，个人认为整体质量很高
Pwned Labs - The ultimate cybersecurity training ground
Pwned Labs upskills cybersecurity professionals affordably and effectively. Explore our interactive labs that replicate real-world scenarios.
Pwned Labs - The ultimate cybersecurity training ground
https://pwnedlabs.io/
Pwned Labs - The ultimate cybersecurity training ground
 
个人根据刷题的知识点整理的思维导图知识点，方便ctfer们或者渗透时查漏补缺
notion image
原件和高清图附件见文末
 
下面为各个题目的中文题解，点第一列就会跳转了，其中 Field BlueTeam 与守较相关，RedTeam 与攻较相关
pwnedlabs-aws-free-writeup
pwnedlabs-aws-free-writeup
Name
Tags
Status
Field
Breach in the Cloud
Breach in the Cloud
cloudtrail
s3
iam
Done
BlueTeam
Beginner
Free
Identify the AWS Account ID from a Public S3 Bucket
Identify the AWS Account ID from a Public S3 Bucket
s3
script
Done
RedTeam
Foundations
Free
AWS S3 Enumeration Basics
AWS S3 Enumeration Basics
s3
Done
RedTeam
Beginner
Free
Intro to AWS IAM Enumeration
Intro to AWS IAM Enumeration
iam
Done
BlueTeam
Beginner
Free
Investigate Threats with Amazon Detective
Investigate Threats with Amazon Detective
ec2
s3
detective
guardduty
Done
BlueTeam
Beginner
Free
SQS and Lambda SQL Injection
SQS and Lambda SQL Injection
lambda
sqs
script
sql injection
web
serverless
Done
RedTeam
Hard
Free
Exploit Weak Bucket Policies for Privileged Access
Exploit Weak Bucket Policies for Privileged Access
s3
bucket policy
gobuster
hashcat
Done
RedTeam
Beginner
Free
Identify IAM Breaches with CloudTrail and Athena
Identify IAM Breaches with CloudTrail and Athena
athena
iam
cloudtrail
Done
BlueTeam
Beginner
Free
Secure S3 with Amazon Macie
Secure S3 with Amazon Macie
macie
s3
Done
BlueTeam
Beginner
Free
Reveal Hidden Risks with AWS Security Hub
Reveal Hidden Risks with AWS Security Hub
s3
Security Hub
Done
BlueTeam
Beginner
Free
Assume Privileged Role with External ID
Assume Privileged Role with External ID
fuff
iam
s3
secrets manager
web
assume role
external id
cloud shell
Done
RedTeam
Beginner
Free
Leverage Leaked Credentials for Pwnage
Leverage Leaked Credentials for Pwnage
git
rds
trufflehog
sast
mysql
gitleaks
secrets manager
Done
RedTeam
Beginner
Free
Pillage Exposed RDS Instances
Pillage Exposed RDS Instances
rds
nmap
brute force
Done
RedTeam
Beginner
Free
Plunder Public RDS Snapshots
Plunder Public RDS Snapshots
ec2
rds
snapshot
postgres
Done
RedTeam
Beginner
Free
Loot Public EBS Snapshots
Loot Public EBS Snapshots
s3
iam
ebs
snapshot
Done
RedTeam
Beginner
Free
Path Traversal to AWS credentials to S3
Path Traversal to AWS credentials to S3
web
ec2
path traversal
directory traversal
burp suite
fuff
Done
RedTeam
Beginner
Free
Hunt for Secrets in Git Repos
Hunt for Secrets in Git Repos
git
trufflehog
git-secrets
Done
RedTeam
Beginner
Free
Access Secrets with S3 Bucket Versioning
Access Secrets with S3 Bucket Versioning
s3
web
versioning
Done
RedTeam
Beginner
Free
Execute and Identify Credential Abuse in AWS
Execute and Identify Credential Abuse in AWS
hash cracking
john
s3
dynamodb
vim
macro
cloudtrail
athena
credential stuffing
Done
RedTeam
Intermediate
Free
Abuse Cognito User and Identity Pools
Abuse Cognito User and Identity Pools
s3
web
cognito
lambda
ssrf
source code review
Done
RedTeam
Intermediate
Free
S3 Bucket Brute Force to Breach
S3 Bucket Brute Force to Breach
brute force
fuff
lambda
s3
ssm
Done
RedTeam
Beginner
Free
Uncover Secrets in CodeCommit and Docker
Uncover Secrets in CodeCommit and Docker
trufflehog
codecommit
docker
Done
RedTeam
Foundations
Free
Leverage Insecure Storage and Backups for Profit
Leverage Insecure Storage and Backups for Profit
hash cracking
iam
s3
psremoting
powershell
windows
ntds
active directory
domain
jea
hashcat
Done
RedTeam
Beginner
Free
SSRF to Pwned
SSRF to Pwned
s3
bucket
web
ssrf
metadata
ec2
Done
RedTeam
Beginner
Free
 
附件更新 2024.7.14 v1
tari-pwnedlabs-aws-free.xmind
498.8KB
tari-pwnedlabs-aws-free.png.7z
4105.0KB
 
相关文章 :
技术分享
  • 云安全
  • 云安全CTF
  • AWS
    • wordpress后台登录密码前端js加密+php后端解密离职了，第一份安全攻防工作碎碎念
    Loading...
    目录