Every penetration tester knows that proper enumeration is the key to a successful engagement; this is especially true for cloud penetration tests. However, cloud environments aren't small. In fact, you'll often see tens of thousands of resources and policies in just a single account. Without knowing the proper tools to use or what information to look for, the already daunting task of enumeration starts to look impossible. Thankfully, Bishop Fox's very own Cloudfox is available to make this difficult task manageable. In this session, Mitchell Sperling, Senior Security Consultant at Bishop Fox, will demonstrate how he uses CloudFox during cloud penetration tests to quickly enumerate large cloud environments and identify interesting attack paths. 

Speaker: Mitchell Sperling, Senior Security Consultant at Bishop Fox

Date/Time: August 21st, 2025 at 2pm EST/7pm BST

Attend Link: https://discord.com/invite/ANy...

What We'll Cover: 

• Installing and using CloudFox
• Parsing output to identify vulnerabilities
• Integrating CloudFox into your current testing workflow
• Understanding the limitations of CloudFox 

Who Should Watch:

This session is primarily geared towards penetration testers who are looking to improve their cloud enumeration capabilities. While experience with cloud environments is recomemnded, the session is designed to be a beginner-friendly introduction to CloudFox and using it to effectively enumerate cloud environments.