Python: Pen Testing AWS

Focused View

Malcolm Shore

1:51:48

0 View

01 Introduction

001 Using Python to test for cloud deployment weaknesses through pen testing.mp4

00:50

002 What you need to know.mp4

00:31

02 Using Python to Manage AWS

001 Understanding AWS.mp4

05:00

002 Rules for pen testing AWS.mp4

02:00

003 Setting up an AWS account.mp4

06:17

004 Provisioning an AWS resource.mp4

03:04

005 Setting up the Windows Subsystem for Linux.mp4

02:19

006 AWS Command Line Interface.mp4

03:31

007 Automating cloud deployments with Terraform.mp4

02:27

03 Using CloudGoat for Testing

001 Understanding the CloudGoat testing paradigm.mp4

03:05

002 Installing CloudGoat.mp4

02:07

003 Launching CloudGoat scenarios.mp4

02:29

004 Listing the user policy.mp4

02:50

005 Gaining privileges by changing policies.mp4

02:27

006 Exploiting a misconfigured server.mp4

04:22

007 Closing down a CloudGoat scenario.mp4

00:37

04 Using the AWS Robot Framework

001 Taking a first look at the Python boto3 AWS library.mp4

03:19

002 Enumerating policies.mp4

02:04

003 Adding sessions to your Python scripts.mp4

02:06

004 Checking for guards.mp4

02:38

005 Managing IAM programmatically.mp4

02:44

006 Creating users programmatically.mp4

02:28

007 Managing secrets using Python.mp4

03:42

008 Listing all EC2 instances.mp4

07:06

009 Listing all RDS instances.mp4

03:36

010 Challenge.mp4

01:15

011 Solution.mp4

00:42

05 The Python AWS Trace Enumerator

001 The Python AWS Trace Enumerator.mp4

04:06

002 Looking inside Pate.mp4

06:04

003 Challenge.mp4

01:17

004 Solution.mp4

01:01

06 Python Testing Tools

001 Looking at a weird Python script.mp4

04:39

002 The PACU pen testing framework.mp4

01:41

003 Navigating the PACU console.mp4

03:40

004 Exploring PACU test modules.mp4

01:52

005 Account privilege escalation.mp4

02:36

006 Deploying the ec2 ssrf scenario.mp4

00:49

007 Pen testing Lambda with PACU.mp4

06:33

008 Cleaning up your cloud.mp4

01:06

07 Conclusion

001 Whats next .mp4

00:48

Description

Pen testing is a standard technique for on-site systems, but the way testing is carried out in the cloud is different. This course explores the different types of vulnerabilities in the cloud, the techniques used to test cloud deployments, and key open-source tools for testing Amazon Web Service deployments: CloudGoat, the AWS CLI, and the AWS Python Software Development Kit, known as boto3. Instructor Malcolm Shore shows how to set up your test environment and then use Python to enumerate policies, programmatically create users, manage secrets, list EC2 and RDS instances, and more. He also shows how to get a quick summary of the resources in your AWS account with the PATE tool and use other Python-based testing tools such as PACU. The skills you learn in this course will help you test your AWS deployments for the weaknesses that others will exploit and design your own customs scripts for testing.

More details

User Reviews

Rating

average 0

Total votes0

Focused display

Amazon AWS

Malcolm Shore

Instructor's Courses

Wide range of IT experience ranging from systems programming to policy and strategic planning. Strong expertise in applied IT security, focused on policy and governance. Teaching post graduate security (forensics, information warfare, security management, applied cryptography) Past interests include virtual worlds and web3d developments. Current work focusing on Cloud, security architectures, and national-level cybersecurity Specialties: SABSA, Cloud, Cryptography, Cybersecurity Strategy, Network Survivability

Linkedin Learning

View courses Linkedin Learning

LinkedIn Learning is an American online learning provider. It provides video courses taught by industry experts in software, creative, and business skills. It is a subsidiary of LinkedIn. All the courses on LinkedIn fall into four categories: Business, Creative, Technology and Certifications. It was founded in 1995 by Lynda Weinman as Lynda.com before being acquired by LinkedIn in 2015. Microsoft acquired LinkedIn in December 2016.