PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Cloud Security Podcast Featuring Seth Art: Cloud Pentest of AWS

bishopfox.com | blog | #cloud | #aws | #security-tools | #podcast | #cloudfox | #cloud-pentest
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

A Cloud Security Podcast interview with Seth Art on penetration testing AWS environments, why configuration reviews alone fall short, and how open-source tools like CloudFox are used in engagements.
Published
Collected

Related coverage

tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
tool · github.com
Apple Private Cloud Compute (PCC) Security Source Code and Research Tools
Provides unprecedented source-level visibility into Apple's cloud AI infrastructure, allowing security researchers to verify cryptographic privacy guarantees and audit components eligible for Apple's PCC Security Bounty.
blog · bishopfox.com
Introducing CloudFox GCP: Attack Path Identification for Google Cloud
CloudFox GCP extends attack-path discovery to Google Cloud: enumerate resources and map IAM inheritance and service-account risk across the org hierarchy; FoxMapper adds privilege escalation chains.
blog · bishopfox.com
Celebrating One Year of CloudFox
Bishop Fox celebrates CloudFox's first year—new AWS and Azure commands, expanded inventory—and CloudFoxable, an intentionally vulnerable AWS environment with 18 CTF challenges that drew 200+ users.
blog · bishopfox.com
Introducing CloudFoxable: A Gamified Cloud Hacking Sandbox
Bishop Fox introduces CloudFoxable, an intentionally vulnerable AWS environment deployed via Terraform that teaches cloud penetration testing through CTF challenges, flags, and a public scoreboard.
blog · bishopfox.com
Our Favorite Tools of the Year: 2022 Edition
Bishop Fox's 2022 tool retrospective highlights homegrown releases—Unredacter for defeating pixelation redactions, Asminject for Linux process injection, CloudFox for cloud attack paths, and Spoofy.
Back