Overview
StormShadow is a challenging, immersive AWS range. It mirrors production services and controls and presents the realistic attack paths you’re likely to encounter on real engagements.
Scenario
Web-to-cloud breach in AWS. Exploit the app, chain pivots through exposed artifacts and weak trust boundaries, climb roles, and take over the AWS account.
Skills Needed
- In-depth knowledge of AWS and Linux CLI
- Knowledge of web vulnerabilities
- Experience with assessing cloud infrastructure
- Ability to undertake independent research
Real World Context
As organizations migrate to cloud through, it's critical that they thoroughly examine and lock down their services.
A misconfiguration or overly permissive policy could be the foothold and threat actor needs to gain access and move laterally across services!