Скачать или смотреть AWS Cloud Red Teaming Training Part 01 - VPC lateral movement. Beginner to expert level!

AWS Cloud Red Teaming Training Part 01 - VPC lateral movement. Beginner to expert level!
** Part 02 Link**
   • AWS Cloud Red Teaming Training Part 02 - E...  

Download the PDF Guide for AWS Red Teaming - https://drive.google.com/file/d/1dG_K...

**VPC LAB Creation**
   • AWS Pentesting - Creating cloud lab for VP...  

**Trainer Profile**
  / dipeshcybersecurity  

  / dip7sh  

**AWS Red Teaming syllabus**

1.AWS Keys compromise from various sources such as Github, google dorking.
2.Lateral movement in VPC
3.Find the secret in isolated instance
4.Data exfiltration with the help of netcat
5.Data exfiltration with the help of S3 bucket
6.Setting up persistence on Ubuntu and AWS account
7.Working with S3 from the red teaming perspective

========VPC Lateral movement COMMANDS==========
Below is the environment details

VPC01:
vpc-09981e6f438fa92a9
VPC02:
vpc-01bbae327358338e9
=====
Subent in Public-VPC01:
subnet-02546e58e9a954587
Subent in Private-VPC01:
subnet-09c87bcf6b1707815
Subent in Private-VPC02:
subnet-0be1a4d51cad5a198
=====
Route Table in VPC01:
rtb-072d959642784eef9
Route Table in VPC02:
rtb-060ac54846e93cb28
=====
ACL-01 (VPC01 subnets):
acl-06ff21d78ed8b772e
ACL-02 (VPC02 subnets):
acl-07528cc3609d2661d
=====
SG-Pub-VPC01:
sg-063fe8c1638bf0c8c
SG-Priv-VPC01:
sg-0dba21a6999f3565c
SG-Priv-VPC02:
sg-0f58e47aa6f7f94b1
=====

Below are the commands

***Check VPCs***
aws ec2 describe-vpcs
aws ec2 describe-vpcs --region us-east-1
aws ec2 describe-vpcs --filters "Name=vpc-id,Values=vpc-09981e6f438fa92a9"
aws ec2 describe-vpcs --filters "Name=vpc-id,Values=vpc-01bbae327358338e9"

***Check subnets***
aws ec2 describe-subnets
aws ec2 describe-subnets --filters "Name=vpc-id,Values=vpc-09981e6f438fa92a9"
aws ec2 describe-subnets --filters "Name=vpc-id,Values=vpc-01bbae327358338e9"

***Check route tables***
aws ec2 describe-route-tables
aws ec2 describe-route-tables --filters "Name=vpc-id,Values=vpc-09981e6f438fa92a9"
aws ec2 describe-route-tables --filters "Name=vpc-id,Values=vpc-01bbae327358338e9"

***Check network acls***
aws ec2 describe-network-acls
aws ec2 describe-network-acls --filters "Name=association.subnet-id,Values=subnet-02546e58e9a954587"
aws ec2 describe-network-acls --filters "Name=association.subnet-id,Values=subnet-09c87bcf6b1707815"
aws ec2 describe-network-acls --filters "Name=association.subnet-id,Values=subnet-0be1a4d51cad5a198"

***Check security groups***
aws ec2 describe-security-groups

Optional:
aws ec2 describe-instances
aws ec2 describe-instances --filters "Name=vpc-id, Values=vpc-09981e6f438fa92a9"
aws ec2 describe-instances --filters "Name=vpc-id, Values=vpc-01bbae327358338e9"

Pivoting:

Describes all VPC Peering Connections:
aws ec2 describe-vpc-peering-connections

For VPC01:
Describe about Subnet of the specified VPC:
aws ec2 describe-subnets --filters "Name=vpc-id, Values=vpc-09981e6f438fa92a9"

Describe about Route Table of the specified Subnet:
aws ec2 describe-route-tables --filters "Name=vpc-id, Values=vpc-09981e6f438fa92a9"

Repeat for VPC02:
aws ec2 describe-subnets --filters "Name=vpc-id, Values=vpc-01bbae327358338e9"
aws ec2 describe-route-tables --filters "Name=vpc-id, Values=vpc-01bbae327358338e9"

Describe about EC2 Instances In the specified Subnet:
aws ec2 describe-instances --filters "Name=subnet-id, Values=subnet-02546e58e9a954587"
aws ec2 describe-instances --filters "Name=subnet-id, Values=subnet-09c87bcf6b1707815"
aws ec2 describe-instances --filters "Name=subnet-id, Values=subnet-0be1a4d51cad5a198"

****From our computer connect the compromise EC2 instance***
chmod 400 ssh-private-key.pem
ssh -i "ssh-private-key.pem" [email protected]

**Now try to jump between instances:**
Failed attempt:
try to access vpc2 from vpc1 public subnet

laternal movement from public subnet to private subnet
try to access vpc1 priv subnet from vpc1 public subnet

laternal movement from vpc1 private subnet to vpc2 private subnet
try to access vpc2 priv subnet from vpc1 priv subnet

=======***End of commands***=======

Find the latest services offering here - https://bit.ly/42x2SrE

Our social media handles:
🐦 Twitter: twitter.com/CybersSecret
💼 LinkedIn: linkedin.com/company/CybersSecret

Queries:
aws hacking
amazon web services
aws cloud
amazon vpc
aws pentesting
aws red teaming
cloud hacking
red teaming
hacking
penetration testing
cloud penetration testing
aws penetration testing
vpc hacking
lateral movement
data exfiltration
pivoting
post exploitation
pentesting
aws pentesting
cloud pentesting
red teaming in cloud
kali linux
what is red teaming
red teaming guide

#AWS #CloudRedTeaming #LiveRecording #Cybersecurity #RedTeam #CloudSecurity #HandsOnLearning #CyberTraining #SecurityWorkshop #LiveSession #SecurityTraining