AWS Privilege Escalation and Lateral Movements

Published: 01 January 1970
on channel: DevSecCon
201
16

Elevate Your Cloud Security Game: From Initial Access to Admin Privileges in AWS

Initial Access: We specialize in exploiting vulnerabilities like SQLi, RFI, Command Injection, SSRF, and more. These techniques grant us entry, but the real challenge lies in privilege escalation and lateral movement—especially in complex, full-cloud environments where threats can multiply exponentially.

Focus of the Talk: This session dives deep into AWS cloud security, showcasing methods to leverage initial access for privilege escalation and lateral movement attacks, ultimately gaining administrative permissions in an AWS account.

Tool Spotlight - “nuvola”: Developed by Prima Assicurazioni, “nuvola” is an open-source tool designed for security analysts. It offers a high-level overview of an AWS account by gathering configurations and creating a digital twin of the cloud environment, simplifying the detection of potential security threats.

Key Takeaways:
Effective techniques for initial access in AWS environments.
Strategies for identifying and exploiting privilege escalation paths.
Leveraging “nuvola” to navigate and secure AWS accounts.

Join us to transform your approach to cloud security and stay ahead of potential threats in the AWS ecosystem.


Watch video AWS Privilege Escalation and Lateral Movements online without registration, duration hours minute second in high quality. This video was added by user DevSecCon 01 January 1970, don't forget to share it with your friends and acquaintances, it has been viewed on our site 201 once and liked it 16 people.