Cloud Security Lab Walkthroughs
Watch full walkthroughs of our hands-on cloud security labs across AWS, Azure, and Google Cloud. Each video shows the real attack and defense tradecraft end to end. Free labs run live with no setup, and premium labs come with a Pwned Labs membership.
Introducing Pwned Labs
A quick introduction to Pwned Labs and how our hands-on cloud security labs work.
TTPs to gain situational awareness in GCP
A deep session on gaining situational awareness across a Google Cloud environment.
Phished for Initial Access
Full walkthrough of the Phished for Initial Access lab. Watch the attack path end to end, then try it yourself.
Exploit SQL Injection in Azure Function App
Full walkthrough of the Exploit SQL Injection in Azure Function App lab. Watch the attack path end to end, then try it yourself.
Execute Azure Credential Shuffle to Achieve Objectives
Full walkthrough of the Execute Azure Credential Shuffle to Achieve Objectives lab. Watch the attack path end to end, then try it yourself.
Bypass Azure Web App Authentication with Path Traversal
Full walkthrough of the Bypass Azure Web App Authentication with Path Traversal lab. Watch the attack path end to end, then try it yourself.
Unmask Privileged Access in Azure
Full walkthrough of the Unmask Privileged Access in Azure lab. Watch the attack path end to end, then try it yourself.
Azure Recon to Foothold and Profit
Full walkthrough of the Azure Recon to Foothold and Profit lab. Watch the attack path end to end, then try it yourself.
Unlock Access with Azure Key Vault
Full walkthrough of the Unlock Access with Azure Key Vault lab. Watch the attack path end to end, then try it yourself.
Loot Exchange, Teams and SharePoint with GraphRunner
Full walkthrough of the Loot Exchange, Teams and SharePoint with GraphRunner lab. Watch the attack path end to end, then try it yourself.
Azure Blob Container to Initial Access
Full walkthrough of the Azure Blob Container to Initial Access lab. Watch the attack path end to end, then try it yourself.
Abuse Azure Logic App Automation
Full walkthrough of the Abuse Azure Logic App Automation lab. Watch the attack path end to end, then try it yourself.
Impersonate GCP Service Account for Privileged Access
Full walkthrough of the Impersonate GCP Service Account for Privileged Access lab. Watch the attack path end to end, then try it yourself.
Escalate GCP privileges with Implicit Delegation
Full walkthrough of the Escalate GCP privileges with Implicit Delegation lab. Watch the attack path end to end, then try it yourself.
Tunnel Through GCP via JWT Forgery
Full walkthrough of the Tunnel Through GCP via JWT Forgery lab. Watch the attack path end to end, then try it yourself.
Exploit SSRF with Gopher for GCP Initial Access
Full walkthrough of the Exploit SSRF with Gopher for GCP Initial Access lab. Watch the attack path end to end, then try it yourself.
Infiltrate GCP via WebApp Exploitation
Full walkthrough of the Infiltrate GCP via WebApp Exploitation lab. Watch the attack path end to end, then try it yourself.
Investigate a Ransomware Attack in AWS using Splunk
Full walkthrough of the Investigate a Ransomware Attack in AWS using Splunk lab. Watch the attack path end to end, then try it yourself.
Pivot Through Service Accounts using Dangerous Permissions
Full walkthrough of the Pivot Through Service Accounts using Dangerous Permissions lab. Watch the attack path end to end, then try it yourself.
Leverage Google Workspace for GCP Resource Access
Full walkthrough of the Leverage Google Workspace for GCP Resource Access lab. Watch the attack path end to end, then try it yourself.
Continuous Integration / Continuous Deception
A session on operating as malicious maintainers and abusing CI/CD pipelines.
Gain Entry to GCP via GitLab Commit
Full walkthrough of the Gain Entry to GCP via GitLab Commit lab. Watch the attack path end to end, then try it yourself.
Reveal Hidden Files in Google Storage
Full walkthrough of the Reveal Hidden Files in Google Storage lab. Watch the attack path end to end, then try it yourself.
Intro to AWS IAM Enumeration
Full walkthrough of the Intro to AWS IAM Enumeration lab. Watch the attack path end to end, then try it yourself.
Intro to Azure Recon with BloodHound
Full walkthrough of the Intro to Azure Recon with BloodHound lab. Watch the attack path end to end, then try it yourself.
No walkthroughs match your search. Browse all labs.
New walkthroughs are published regularly. Subscribe on YouTube or browse all labs.