Skip to content

Pwned Labs Blog

 

The latest techniques in hacking and defending

Recent Articles

Pwned Labs
Red Team, AWS, Snapshot

Thunderdome - Pulled From the Sky walkthrough

This walkthrough captures the second flag, Pulled From the Sky, in the Pwned Labs ThunderDome cyber range: it reads an...
Read more
Pwned Labs
Red Team, AWS, Bitbucket

Thunderdome - Emerge Through the Breach walkthrough

This walkthrough captures the first flag, Emerge Through the Breach, in the Pwned Labs ThunderDome cyber range: it...
Read more
Pwned Labs
AWS, Pentesting, IAM Policy, Privilege Escalation, Pacu

Beginner's Guide to hunting for AWS IAM Privilege Escalations with Pacu

You hunt for AWS IAM privilege escalation by enumerating what an identity is allowed to do, then looking for...
Read more
Pwned Labs
Azure, Red Team, SQL

EvilSQL: coercing requests from Azure SQL Managed Instance

This research shows how Azure SQL Managed Instance can be coerced into making outbound requests. Using CREATE EXTERNAL...
Read more
Pwned Labs
Red Team, AWS, OIDC

Abusing Identity Providers in AWS

A misconfigured OIDC trust policy in AWS lets an external identity assume a role when the policy checks only the...
Read more
Pwned Labs
Azure, Red Team, VM

Diving Deep into Azure VM Attack Vectors

Azure virtual machines are often attacked through their management features rather than software bugs: Custom Script...
Read more

Your security training ground


Experience, real-world, byte-sized cloud security labs for training cyber warriors. From beginners to pros, our engaging platform allows you to secure your defenses, ignite your career and stay ahead of threats.