How to Build a Cloud Hacking Lab for Azure and more

How easy is it to build your own cloud hacking lab? In this video, I show how you can sign-up for your own Microsoft Azure and Amazon AWS accounts, and then use them to learn common cloud vulnerabilities such as public accessibility of resources, server-side request forgery, cloud-based privilege escalation issues, and more.

Learn how you can deploy resources to your own cloud environment using automation tools known as “Infrastructure-as-Code”. Being able to quickly spin up and down resources within your own cloud accounts makes it possible to simulate real-world environments that can be hacked without risk to other organizations.

Instructions for setting up Azure and AWS accounts can be found here

https://btc.breakforge.io/

• AWS: https://aws.amazon.com/free/
• Azure: https://azure.microsoft.com/en-us/pri...
• Terraform: https://www.terraform.io/
• CloudGoat: https://github.com/RhinoSecurityLabs/...
• AzureGoat: https://github.com/ine-labs/AzureGoat
• PurpleCloud: https://github.com/iknowjason/PurpleC...