AWS Privilege Escalation and Lateral Movements

Elevate Your Cloud Security Game: From Initial Access to Admin Privileges in AWS
Initial Access: We specialize in exploiting vulnerabilities like SQLi, RFI, Command Injection, SSRF, and more. These techniques grant us entry, but the real challenge lies in privilege escalation and lateral movement-especially in complex, full-cloud environments where threats can multiply exponentially.
Focus of the Talk: This session dives deep into AWS cloud security, showcasing methods to leverage initial access for privilege escalation and lateral movement attacks, ultimately gaining administrative permissions in an AWS account.
Tool Spotlight - “nuvola”: Developed by Prima Assicurazioni, “nuvola” is an open-source tool designed for security analysts. It offers a high-level overview of an AWS account by gathering configurations and creating a digital twin of the cloud environment, simplifying the detection of potential security threats.
Key Takeaways:
- Effective techniques for initial access in AWS environments.
- Strategies for identifying and exploiting privilege escalation paths.
- Leveraging “nuvola” to navigate and secure AWS accounts.
Join us to transform your approach to cloud security and stay ahead of potential threats in the AWS ecosystem.