PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing CloudFoxable: A Gamified Cloud Hacking Sandbox

bishopfox.com | blog | #cloud | #cloud-security | #aws | #ctf | #penetration-testing | #training | #cloudfox
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox introduces CloudFoxable, an intentionally vulnerable AWS environment deployed via Terraform that teaches cloud penetration testing through CTF challenges, flags, and a public scoreboard.
Published
Collected

Related coverage

blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
blog · netspi.com
Resources for Aspiring Penetration Testers
A resource list for aspiring penetration testers recommending books like The Web Application Hacker's Handbook, plus online training resources for self-study.
blog · bishopfox.com
Introducing CloudFox GCP: Attack Path Identification for Google Cloud
CloudFox GCP extends attack-path discovery to Google Cloud: enumerate resources and map IAM inheritance and service-account risk across the org hierarchy; FoxMapper adds privilege escalation chains.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · bishopfox.com
Cloud Security Podcast Featuring Seth Art: Cloud Pentest of AWS
A Cloud Security Podcast interview with Seth Art on penetration testing AWS environments, why configuration reviews alone fall short, and how open-source tools like CloudFox are used in engagements.
Back