Cloud Pen Testing - Can I Misuse This?

With tools like Cloud Fox, it's easier to test something like on ECS or something that's on a managed AWS service. When you're testing EC2, you have to do that end map because there's no API that's going to tell you this EC2 is listening on these four services. And then through SSM in there, it's an order to know specific services which can be exploited as well. Like what are some of the skills said that you feel people should be specializing in? I think for people who are probably listening in and are experienced pen testers in the web app or networking space as well. So please, I put them as a password and, you know,

Transcript

Play full episode

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app