Filtered View
Tag: #aws
6 posts
Jul 16, 2026
HTB Sherlock: Nubilum-1
AWS CloudTrail investigation of unauthorized EC2 activity, exposed S3 access, attacker infrastructure changes, and PoshC2 activity.
↗
#writeup
#htb
#sherlock
#aws
#cloudtrail
HTB Sherlock for medium
May 29, 2026
AWS Detection + Blue Team
Phase 4 notes: AWS detection, CloudTrail analysis, Athena queries, Macie, Security Hub, Amazon Detective, and credential abuse response.
↗
#aws
#cloud-security
#blue-team
#cloudtrail
#athena
research
May 25, 2026
AWS Privilege Escalation + Service Abuse
Phase 3 notes: privilege escalation paths, trust-policy abuse, and service-level exploitation across S3, IAM, Cognito, SQS, and Lambda.
↗
#aws
#cloud-security
#privilege-escalation
#iam
#s3
research
May 25, 2026 · research
Cloud Docs, Challenges, and Cheatsheets
Curated cloud learning resources including challenge platforms and practical attack/defense references.
#research
#cloud
#challenges
#cheatsheet
#aws
Open links →
May 23, 2026
Web-to-Cloud Attack Chains
Phase 2 notes: chaining web vulnerabilities into AWS credential theft, secret discovery, and cloud resource compromise.
↗
#aws
#cloud-security
#web
#ssrf
#path-traversal
research
May 17, 2026
AWS Storage + IAM Foundation
Phase 1 notes: S3, IAM, account ID discovery, CloudTrail investigation, and exposure risks in EBS/RDS.
↗
#aws
#cloud-security
#s3
#iam
#cloudtrail
research