Train From Home on Your Schedule with OnDemand - Special Offers Available Now

Webcasts

To attend this webcast, login to your SANS Account or create your Account.

Cloud Penetration Testing

  • September 17, 2020 @ 7:00AM SGT - 9:00AM SGT Wednesday, September 16, 2020 at 7:00 PM EDT (2020-09-16 23:00:00 UTC)
  • Moses Frost

You can now attend the webcast using your mobile device!

  

Overview

Our 2 hour workshop is designed to provide a starting point for potential Cloud Penetration Testing Course participants. In this workshop we will be discussing some of the common pitfalls that we have been observing in the wild as it pertains to cloud architectures. There are several tools and techniques that we discuss in this workshop that are not discussed in class but showcase the common pitfalls we encounter when architecting, designing, and even testing cloud environments. In this talk we show how attackers can move data laterally, how identity on systems can be abused, and how we can build tooling closer to our targets to provide a landing point that is more efficient for both testing and operations. We will also be discussing the role that Containers and Cloud Native Applications play in attacker simulations and showcase container breakout strategies.

Speaker Bio

Moses Frost

 

Moses Frost is a 20 year IT Veteran, having worked at Large Healthcare, Startups in Data and Data mining, FinTech, and Large Technology Companies like Cisco Systems. He has been an Incident Responder, Penetration Tester, IT Architect, and a Platform Engineer. He's spoken at various conferences in his tenure including DefCon and BSides. He is the Author of SEC588, Cloud Penetration Testing, and SEC642 Advanced Web Application Penetration Testing. He is the Author of SEC588, Cloud Penetration Testing, and SEC642 Advanced Web Application Penetration Testing.

Need Help? Visit our FAQ page or email webcast-support@sans.org.

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.