Bishop Fox is proud to present at the BSides Tampa. Senior Security Consultant David Bravo will teach an AWS hacking course designed to arm security professionals with the techniques needed to uncover and leverage common vulnerabilities within AWS environments.

For more details, visit the official BSides Tampa website.

"AWS Cloud Penetration Testing with Open Source Tools"

This AWS hacking course is designed to arm security professionals with the techniques needed to uncover and leverage common vulnerabilities within AWS environments. The training begins with guidance on how to lead a discussion with a client to define clear assessment goals and refine the scope. An important element of the course is the combination of theory and hands-on practice leveraging a vulnerable AWS lab using cloudfoxable. The course places a strong emphasis on exploiting misconfigurations utilizing open source tools such as ScoutSuite, pmapper, and CloudFox. 

A deep dive into AWS Identity and Access Management (IAM) is a key feature, where learners explore IAM vulnerabilities with a mix of theoretical knowledge and practical application. This includes leveraging pmapper to navigate IAM complexities, uncovering roles, policies, and permissions that can be exploited for unauthorized access or privilege escalation. The course is targeted at security practitioners of multiple levels and aims to deliver essential skills for conducting comprehensive security assessments in AWS environments.