Session 1 — AWS Foundations & Attacker Mindset
Core AWS concepts (accounts, Organizations, regions, endpoints), shared responsibility model, and attacker priorities in cloud (persistence, exfiltration, lateral movement). IAM primitives (users, groups, roles, policies, STS) and common misconfigs that open escalation paths.

Session 2 — IAM Exploitation & Escalation
Role trust relationships, AssumeRole abuse, managed vs inline policies, wildcard actions, and cross-account trusts; typical escalation patterns and attacker workflows. Analysis of IAM policy/trust docs to trace privilege escalation paths.

Session 3 — EC2 Exploitation & Credential Theft
EC2 attack surface: IMDSv1/v2 abuse, SSRF → metadata theft, temp credential misuse, and snapshot/AMI/keypair exposures. Guided lab: exploit vulnerable app to retrieve IMDS creds, then use them for enumeration and persistence.

Session 4 — S3 Misconfigs & Data Exfiltration
Bucket policies, ACL pitfalls, public access patterns, presigned URL abuse, and cross-region data theft. Review logs to surface detection gaps and practice controlled bucket enumeration and object access.

 

Session 1 — Serverless & API Gateway Exploitation
Lambda internals (env vars, packages, roles), API Gateway misconfigs (auth bypass, mapping flaws), and event-driven escalation. Guided lab: extract secret from Lambda, bypass Gateway validation, and escalate.

Session 2 — Federation & Cognito Abuse
Cognito pools (user vs identity), app client misconfigs, SAML/OIDC federation basics, token replay and claim abuse, and role mapping flaws. Inspect sample tokens and mappings to craft escalation path.

Session 3 — KMS & Secrets Abuse
KMS key policy/grant flaws enabling decryption, Secrets Manager and Parameter Store exposures, and lateral movement with recovered creds. Lab: exploit weak KMS grant to decrypt a secret and pivot.

Session 4 — IaC Abuse, Detection Evasion & Reporting
CloudFormation/Terraform backdoors, CodePipeline persistence, tampering with CloudTrail/GuardDuty evasion, and chaining into full kill chain. Final lab: simulate pipeline backdoor and build a compact red-team report.

 

Prerequisites

• Basic Cloud Concepts
• Basic Pentesting & Security Concepts
• Basic Command Line & PowerShell Skills

 

Purchase Includes

• AWS Pentesting Training
• Certificate of Completion

 

Who Should Join This Training?

• Penetration testers expanding into cloud engagements
• Security engineers responsible for securing AWS workloads
• Cybersecurity professionals needing hands-on cloud red teaming experience
• Developers and Architects seeking to harden AWS workloads by understanding attacker tradecraft

 

Trainer Details

Shashi Kant Prasad

Principal Security Consultant

Shashi Kant Prasad is a skilled red teamer at Redfox Security with expertise in Web, Cloud, Hardware, DevOps, and Red Teaming. He also trains peers at top security conferences.

 

Why Attend?

• Expert-Led Sessions: Learn from experienced cloud red teamers with deep AWS expertise.
• Practical Knowledge: Focus on actionable techniques you can apply immediately.
• Real-World Scenarios: Gain the skills to perform attacks that are common in real-world penetration tests and engagements.

 

FAQs

1. Who is this training for?

Pentesters, red teamers, security professionals, ethical hackers, and anyone interested in offensive AWS tactics.

2. What will I learn in this training?

Hands-on experience with AWS recon, IAM escalation, EC2/IMDS exploitation, S3/RDS data exposure, serverless/API attacks, EKS identity abuse, KMS/Secrets misuse, and detection evasion.

3. Do I need prior experience in cybersecurity?

Basic knowledge of security, networking, and cloud concepts is recommended, but the bootcamp is structured to build your skills progressively.

4. Will I get a certification after completing the training?

Yes, upon successful completion, you will earn the certification, which validates your red teaming skills.

 

Key Takeaways

• Lifetime access to training recordings and exclusive content.
• Hands-on premium AWS Pentesting lab.
• 30 days of lab access.
• Private Discord community access for direct support and networking.
• AWS Pentesting Certificate.

   

Prerequisites

• Basic of Artificial Intelligence
• Basic Pentesting & Security Concepts

 

Who Should Join This Training?

• Penetration testers expanding into AI Security
• Cybersecurity professionals needing hands-on AI red teaming experience
• Developers and Architects seeking to harden LLM models by understanding attacker tradecraft

 

Instructor Details

Utpal Patel

Security Consultant

Utpal Patel is a skilled cybersecurity professional at Redfox Security with expertise in Web, AI, and Red Teaming.

 

Purchase Includes

• AI Hacking Training
• Certificate of Completion

 

Key Takeaways

• Exclusive content
• Hands-on labs
• AI Hacking Concepts

 

Why Attend?

• Expert-Led Sessions: Learn from experienced AI red teamers
• Practical Knowledge: Focus on actionable techniques you can apply immediately.
• Real-World Scenarios: Gain the skills to perform attacks that are common in real-world penetration tests and engagements.

 

FAQs

1. Who is this training for?

Pentesters, red teamers, security professionals, ethical hackers, and anyone interested in offensive AI Security.

2. What will I learn in this training?

AI OWASP TOP 10, Prompt Injection, Jail Breaking, Basics of AI agents

3. Do I need prior experience in cybersecurity?

Basic knowledge of security and working of LLM model is recommended

4. Will I get a certification after completing the training?

Yes, upon successful completion, you will earn the completion certification