Skip to content

Beginner Friendly red team icon   azure

Compromise, Recon and Exfiltration in OCI

Oracle Cloud Infrastructure is unfamiliar ground for many teams. Practice initial compromise, IAM and object storage reconnaissance, and data exfiltration in a live OCI tenant.

Overview

Oracle Cloud Infrastructure is unfamiliar ground for many teams. In this free lab you will practice initial compromise, IAM and object storage reconnaissance, and data exfiltration in a live OCI tenant.

Scenario

You are on a red team engagement against Mega Big Tech, an organization that has moved workloads to Oracle Cloud Infrastructure. Show how an initial foothold can be turned into sensitive data exfiltration.

Lab prerequisites
  • Familiarity with the Linux command line
  • An interest in cloud reconnaissance
Learning outcomes
  • Gain initial access to an OCI tenant
  • Enumerate the environment with oci-enum
  • Perform reconnaissance against OCI IAM
  • Access OCI Object Storage
  • Exfiltrate sensitive data
Real-world context

As organizations adopt Oracle Cloud Infrastructure, attackers follow. Reconnaissance and object storage misconfiguration remain among the most reliable routes to data exposure across every cloud provider.

platform mock(1)

Cloud Security Training To Protect Your Business

Pwned Labs for Business gives your team access to dedicated business content, including labs and cyber ranges.

We also offer in-person or remote workshops, and our cloud penetration services are helping businesses become more secure!