Pwned Labs Blog


The latest techniques in hacking and defending

Kubernetes Penetration Testing Guide

Key Takeaway: Kubernetes penetration testing is the authorized assessment of a cluster from an attacker's point of...

GCP Privilege Escalation: How Attackers Escalate in Google Cloud IAM

Privilege escalation is where most real cloud compromises are won or lost. In Google Cloud, an attacker rarely starts...

Cloud Pentesting Methodology: From Reconnaissance to Privilege Escalation Across AWS, Azure, and GCP

Why Cloud Pentesting Requires a Different Approach Traditional penetration testing methodology (scan, enumerate,...

Entra ID Attack Techniques: How Attackers Compromise Microsoft Cloud Identity

Identity is the front door to the Microsoft cloud, and Entra ID (formerly Azure Active Directory) is the identity...

Attacking Kubernetes in the Cloud: Container Escape to Cluster Admin

Why Kubernetes Is the Next Frontier for Cloud Red Teams Kubernetes has become a primary pivot point in cloud breaches:...

CI/CD to Shell: The GitLab Exploitation Path

CI/CD systems are everywhere now, a core part of the DevOps ecosystem. CI/CD combines continuous integration and...

A new S3 namespace - and a new problem

AWS S3 has long suffered from the bucketsquatting problem. Because bucket names lived in a single global namespace,...

Climbing the Azure RBAC Ladder

Join us in this new blog post as we explore the various methods that threat actors commonly use to move laterally and...

Mapping attack surface for Azure initial access

Join us in this blog post as we explore various methods that threat actors commonly use to gain initial access to Azure.

Exploiting GCP Cloud Build for Privilege Escalation

In this blog post, we will explore how to exploit Cloud Build to escalate privileges and achieve lateral movement in a...

Your security training ground


Experience, real-world, byte-sized cloud security labs for training cyber warriors. From beginners to pros, our engaging platform allows you to secure your defenses, ignite your career and stay ahead of threats.