Attack Description Link aws.credential-access.ec2-get-password-data Retrieve EC2 Password Data Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.credential-access.ec2-get-password-data.md) aws.credential-access.ec2-steal-instance-credentials Steal EC2 Instance Credentials Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.credential-access.ec2-steal-instance-credentials.md) aws.credential-access.secretsmanager-retrieve-secrets Retrieve a High Number of Secrets Manager secrets Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.credential-access.secretsmanager-retrieve-secrets.md) aws.credential-access.ssm-retrieve-securestring-parameters Retrieve And Decrypt SSM Parameters Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.credential-access.ssm-retrieve-securestring-parameters.md) aws.defense-evasion.cloudtrail-delete Delete CloudTrail Trail Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.defense-evasion.cloudtrail-delete.md) aws.defense-evasion.cloudtrail-event-selectors Disable CloudTrail Logging Through Event Selectors Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.defense-evasion.cloudtrail-event-selectors.md) aws.defense-evasion.cloudtrail-lifecycle-rule CloudTrail Logs Impairment Through S3 Lifecycle Rule Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.defense-evasion.cloudtrail-lifecycle-rule.md) aws.defense-evasion.cloudtrail-stop Stop CloudTrail Trail Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.defense-evasion.cloudtrail-stop.md) aws.defense-evasion.organizations-leave Attempt to Leave the AWS Organization Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.defense-evasion.organizations-leave.md) aws.defense-evasion.vpc-remove-flow-logs Remove VPC Flow Logs Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.defense-evasion.vpc-remove-flow-logs.md) aws.discovery.ec2-enumerate-from-instance Execute Discovery (https://www.kitploit.com/search/label/Discovery) Commands on an EC2 Instance Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.discovery.ec2-enumerate-from-instance.md) aws.discovery.ec2-download-user-data Download EC2 Instance User Data TBD aws.exfiltration.ec2-security-group-open-port-22-ingress Open Ingress Port 22 on a Security Group Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.exfiltration.ec2-security-group-open-port-22-ingress.md) aws.exfiltration.ec2-share-ami Exfiltrate an AMI by Sharing It Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.exfiltration.ec2-share-ami.md) aws.exfiltration.ec2-share-ebs-snapshot Exfiltrate EBS Snapshot by Sharing It Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.exfiltration.rds-share-snapshot.md) aws.exfiltration.rds-share-snapshot Exfiltrate RDS Snapshot by Sharing Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.exfiltration.rds-share-snapshot.md) aws.exfiltration.s3-backdoor-bucket-policy Backdoor an S3 Bucket via its Bucket Policy Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.exfiltration.s3-backdoor-bucket-policy.md) aws.persistence.iam-backdoor-role Backdoor an IAM Role Link (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection/blob/main/aws.persistence.iam-backdoor-role.md) aws.persistence.iam-backdoor-user Create an Access Key on an IAM User TBD aws.persistence.iam-create-admin-user Create an administrative IAM User TBD

___________________________
@hacking_Attack
@Hacking_Video

aws.persistence.iam-create-user-login-profile Create a Login Profile on an IAM User TBD aws.persistence.lambda-backdoor-function Backdoor Lambda Function Through Resource-Based Policy TBD Credits Awesome team at Datadog, Inc. for Stratus Red Team here (https://github.com/DataDog/stratus-red-team) Hacking the Cloud AWS (https://hackingthe.cloud/aws/general-knowledge/assume_role_logic/) Falcon Force team blog (https://medium.com/falconforce/falconfriday-detecting-realistic-aws-cloud-attacks-using-azure-sentinel-0xff1c-b62fd45c87dc)

Download AWS-Threat-Simulation-and-Detection (https://github.com/sbasu7241/AWS-Threat-Simulation-and-Detection)

___________________________
@hacking_Attack
@Hacking_Video

Dark Reading: Attacks/Breaches
Gathering Momentum: 3 Steps Forward to Expand SBoM Use

New studies show less than a third of organizations use software bills of materials (SBoMs), but momentum is building to boost that number.

Dark Reading: Attacks/Breaches
Name That Edge Toon: Hey, Batter Batter!

Come up with a clever caption, and our panel of experts will reward the winner with a $25 Amazon gift card.

Hacking on Medium
How to Rickroll your friends with a Poor man’s USB Rubber Ducky?

https://cdn-images-1.medium.com/max/1426/1*BXyAqmG4m-Mubco50OZVow.png
I was going through my old stuff and found an old CD which had a simple flash game in it. I opened it up on my laptop and found a file…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Just How Sure Are You About The Security Of Your Data On Messaging Apps?

https://cdn-images-1.medium.com/max/1080/1*MV3XYjHIqCwK1im33IWZkA.png
Did you know that WhatsApp shares your phone numbers with Facebook?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
تهكير حساب واتساب بجميع الطرق ( 2022 )

https://cdn-images-1.medium.com/max/1280/1*nJg3xIB5ZAaiq4i_hiZULw.png
تهكير حساب whatsapp في هذا المقال الرائع سوف نتعرف على جميع طرق المستخدمة في اختراق الواتساب وتهكير الحسابات, ويعتبر تطبيق الواتساب من…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
What I learnt from reading 126* Information Disclosure Writeups.

https://cdn-images-1.medium.com/max/969/1*N2b2uitwAta6oQzDJS-K6g.png
Let’s tackle the most valuable and mysterious bug type…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Hacking Nginx: Best ways

https://cdn-images-1.medium.com/max/1024/1*Vgr4dyEiRLDDe-SAbpw5Xg.png
Nginx is being used in the wild since a while now. We all have seen NGINX name somewhere while coding/hacking. NGINX has always been a…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Replace the Linux Console Login with something Different.

https://cdn-images-1.medium.com/max/1081/1*Y9AWuhrRKUExWOkCq3Tirg.png
This is intended to inspire creative change to a Home Lab setup, it’s not designed for a production data center. So don’t. Just don’t do…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Inside a Hacker’s Mind: How To Steal Someone’s Password with 4 Easy Steps?

https://cdn-images-1.medium.com/max/2600/0*1IA6Uv7wLGF6je58
What is a hacker, and how do they steal your data? Do you want to learn hack!? How to protect yourself or your company from cyber…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
AWS-Threat-Simulation-and-Detection - Playing Around With Stratus Red Team (Cloud Attack Simulation Tool) And SumoLogic

https://blogger.googleusercontent.com/img/a/AVvXsEiq9S_3mgpnZGdPiDBJm_LNyeHqKIKzcobbEo5QmI5WpQ0HM47yXQBqxNGAiBGfeROdS0yiADMboRiS_8xY56M2wOn7ZsOg_cM19dzUw0TL-YXQajYfwFPLQvqN0_3ceIAh9UIWPtHaPENh35Ehv4xAHolQuCiZsLQlQQo09WeIVP2ivSoEuMfdbtJ-=w640-h252 This repository is a documentation of my adventures with Stratus Red Team - a tool for adversary emulation for the cloud.

Stratus Red Team is "Atomic Red Team for the cloud, allowing to emulate offensive attack techniques in a granular and self-contained manner.
We run the attacks covered in the Stratus Red Team repository one by one on our AWS account. In order to monitor them, we will use CloudTrail and CloudWatch for logging and ingest these logs into SumoLogic for further analysis. https://blogger.googleusercontent.com/img/a/AVvXsEgHdj3sBysKTcEpKM2i8eRsDDRMRSnQvdtebpFobUXb0Wl5AeBzUUd-d77fuwUfILClhaSs-4p-fjPXDiovLlGqVZvwWMOpZ4AU5cz7WNpbY-Z0tHVqGpq11GrBwRDSF5P7nQDDKd66AS2vQPC3dr-GQ4I8r-aJy2mJbHGNfO00GwZkiRDUYl5BguSa=w640-h282 Attack Description Link aws.credential-access.ec2-get-password-data Retrieve EC2 Password Data Link aws.credential-access.ec2-steal-instance-credentials Steal EC2 Instance Credentials Link aws.credential-access.secretsmanager-retrieve-secrets Retrieve a High Number of Secrets Manager secrets Link aws.credential-access.ssm-retrieve-securestring-parameters Retrieve And Decrypt SSM Parameters Link aws.defense-evasion.cloudtrail-delete Delete CloudTrail Trail Link aws.defense-evasion.cloudtrail-event-selectors Disable CloudTrail Logging Through Event Selectors Link aws.defense-evasion.cloudtrail-lifecycle-rule CloudTrail Logs Impairment Through S3 Lifecycle Rule Link aws.defense-evasion.cloudtrail-stop Stop CloudTrail Trail Link aws.defense-evasion.organizations-leave Attempt to Leave the AWS Organization Link aws.defense-evasion.vpc-remove-flow-logs Remove VPC Flow Logs Link aws.discovery.ec2-enumerate-from-instance Execute Discovery Commands on an EC2 Instance Link aws.discovery.ec2-download-user-data Download EC2 Instance User Data TBD aws.exfiltration.ec2-security-group-open-port-22-ingress Open Ingress Port 22 on a Security Group Link aws.exfiltration.ec2-share-ami Exfiltrate an AMI by Sharing It Link aws.exfiltration.ec2-share-ebs-snapshot Exfiltrate EBS Snapshot by Sharing It Link aws.exfiltration.rds-share-snapshot Exfiltrate RDS Snapshot by Sharing Link aws.exfiltration.s3-backdoor-bucket-policy Backdoor an S3 Bucket via its Bucket Policy Link aws.persistence.iam-backdoor-role Backdoor an IAM Role Link aws.persistence.iam-backdoor-user Create an Access Key on an IAM User TBD aws.persistence.iam-create-admin-user Create an administrative IAM User TBD aws.persistence.iam-create-user-login-profile Create a Login Profile on an IAM User TBD aws.persistence.lambda-backdoor-function Backdoor Lambda Function Through Resource-Based Policy TBD Credits1. Awesome team at Datadog, Inc. for Stratus Red Team here
2. Hacking the Cloud AWS
3. Falcon Force team blog Download AWS-Threat-Simulation-and-Detection

___________________________
@hacking_Attack
@Hacking_Video

What I learnt from reading 126* Information Disclosure Writeups.
https://medium.com/@Sm9l/what-i-learnt-from-reading-126-information-disclosure-writeups-d896c5d5a2a4?source=rss------bug_bounty-5

___________________________
@hacking_Attack
@Hacking_Video