- Pentesting CI/CD Methodology
- Github Security
- Gitea Security
- Concourse Security
- CircleCI Security
- TravisCI Security
- Jenkins Security
- Apache Airflow Security
- Terraform Security
- Atlantis Security
- Cloudflare Security
- TODO
- Pentesting Cloud Methodology
- Kubernetes Pentesting
- Kubernetes Basics
- Pentesting Kubernetes Services
- Exposing Services in Kubernetes
- Attacking Kubernetes from inside a Pod
- Kubernetes Enumeration
- Kubernetes Role-Based Access Control(RBAC)
- Abusing Roles/ClusterRoles in Kubernetes
- Kubernetes Namespace Escalation
- Kubernetes Pivoting to Clouds
- Kubernetes Network Attacks
- Kubernetes Hardening
- GCP Pentesting
- GCP - Basic Information
- GCP - Non-svc Persistance
- GCP - Permissions for a Pentest
- GCP - Privilege Escalation
- GCP - Apikeys Privesc
- GCP - AppEngine Privesc
- GCP - Cloudbuild Privesc
- GCP - Cloudfunctions Privesc
- GCP - Cloudscheduler Privesc
- GCP - Compute Privesc
- GCP - Composer Privesc
- GCP - Container Privesc
- GCP - Deploymentmaneger Privesc
- GCP - IAM Privesc
- GCP - KMS Privesc
- GCP - Orgpolicy Privesc
- GCP - Pubsub Privesc
- GCP - Resourcemanager Privesc
- GCP - Run Privesc
- GCP - Secretmanager Privesc
- GCP - Serviceusage Privesc
- GCP - Sourcerepos Privesc
- GCP - Storage Privesc
- GCP - Misc Perms Privesc
- GCP - Network Docker Escape
- GCP - local privilege escalation ssh pivoting
- GCP - Services
- GCP - AI Platform Enum
- GCP - App Engine Enum
- GCP - Cloud Build Enum
- GCP - Cloud Functions Enum
- GCP - Cloud Run Enum
- GCP - Compute Enum
- GCP - Containers, GKE & Composer Enum
- GCP - Databases Enum
- GCP - DNS Enum
- GCP - Filestore Enum
- GCP - IAM, Ppals & Org Policies Enum
- GCP - KMS Manager Enum
- GCP - Pub/Sub
- GCP - Secrets Manager Enum
- GCP - Source Repositories Enum
- GCP - Stackdriver Enum
- GCP - Storage Enum
- GCP - Unauthenticated Enum
- Workspace Pentesting
- AWS Pentesting
- AWS - Basic Information
- AWS - Permissions for a Pentest
- AWS - Persistence
- AWS - Cognito Persistence
- AWS - DynamoDB Persistence
- AWS - EC2 Persistence
- AWS - ECR Persistence
- AWS - ECS Persistence
- AWS - Elastic Beanstalk Persistence
- AWS - IAM Persistence
- AWS - KMS Persistence
- AWS - Lambda Persistence
- AWS - Lightsail Persistence
- AWS - RDS Persistence
- AWS - S3 Persistence
- AWS - SNS Persistence
- AWS - Secrets Manager Persistence
- AWS - STS Persistence
- AWS - SQS Persistence
- AWS - Post Exploitation
- AWS - API Gateway Post Exploitation
- AWS - CodeBuild Post Exploitation
- AWS - Control Tower Post Exploitation
- AWS - DynamoDB Post Exploitation
- AWS - EC2, EBS, SSM & VPC Post Exploitation
- AWS - ECR Post Exploitation
- AWS - ECS Post Exploitation
- AWS - EFS Post Exploitation
- AWS - EKS Post Exploitation
- AWS - Elastic Beanstalk Post Exploitation
- AWS - IAM Post Exploitation
- AWS - KMS Post Exploitation
- AWS - Lambda Post Exploitation
- AWS - Lightsail Post Exploitation
- AWS - RDS Post Exploitation
- AWS - S3 Post Exploitation
- AWS - Secrets Manager Post Exploitation
- AWS - SNS Post Exploitation
- AWS - SQS Post Exploitation
- AWS - SSO & identitystore Post Exploitation
- AWS - STS Post Exploitation
- AWS - Privilege Escalation
- AWS - Apigateway Privesc
- AWS - Chime Privesc
- AWS - Codebuild Privesc
- AWS - Codepipeline Privesc
- AWS - Codestar Privesc
- AWS - Cloudformation Privesc
- AWS - Cognito Privesc
- AWS - Datapipeline Privesc
- AWS - Directory Services Privesc
- AWS - DynamoDB Privesc
- AWS - EBS Privesc
- AWS - EC2 Privesc
- AWS - ECR Privesc
- AWS - ECS Privesc
- AWS - EFS Privesc
- AWS - Elastic Beanstalk Privesc
- AWS - EMR Privesc
- AWS - Gamelift
- AWS - Glue Privesc
- AWS - IAM Privesc
- AWS - KMS Privesc
- AWS - Lambda Privesc
- AWS - Lightsail Privesc
- AWS - Mediapackage Privesc
- AWS - MQ Privesc
- AWS - MSK Privesc
- AWS - RDS Privesc
- AWS - Redshift Privesc
- AWS - SNS Privesc
- AWS - SQS Privesc
- AWS - SSO & identitystore Privesc
- AWS - Organizations Privesc
- AWS - S3 Privesc
- AWS - Sagemaker Privesc
- AWS - Secrets Manager Privesc
- AWS - SSM Privesc
- AWS - STS Privesc
- AWS - WorkDocs Privesc
- AWS - Misc Privesc
- AWS - Services
- AWS - Security & Detection Services
- AWS - CloudTrail Enum
- AWS - CloudWatch Enum
- AWS - Config Enum
- AWS - Control Tower Enum
- AWS - Cost Explorer Enum
- AWS - Detective Enum
- AWS - Firewall Manager Enum
- AWS - GuardDuty Enum
- AWS - Inspector Enum
- AWS - Macie Enum
- AWS - Security Hub Enum
- AWS - Shield Enum
- AWS - Trusted Advisor Enum
- AWS - WAF Enum
- AWS - API Gateway Enum
- AWS - CloudFormation & Codestar Enum
- AWS - CloudHSM Enum
- AWS - CloudFront Enum
- AWS - Codebuild Enum
- AWS - Cognito Enum
- AWS - DataPipeline, CodePipeline & CodeCommit Enum
- AWS - Directory Services / WorkDocs Enum
- AWS - DocumentDB Enum
- AWS - DynamoDB Enum
- AWS - EC2, EBS, ELB, SSM, VPC & VPN Enum
- AWS - ECR Enum
- AWS - ECS Enum
- AWS - EKS Enum
- AWS - Elastic Beanstalk Enum
- AWS - ElastiCache
- AWS - EMR Enum
- AWS - EFS Enum
- AWS - Kinesis Data Firehose Enum
- AWS - IAM Enum
- AWS - KMS Enum
- AWS - Lambda Enum
- AWS - Lightsail Enum
- AWS - MQ Enum
- AWS - MSK Enum
- AWS - Organizations Enum
- AWS - Redshift Enum
- AWS - Relational Database (RDS) Enum
- AWS - Route53 Enum
- AWS - Secrets Manager Enum
- AWS - SNS Enum
- AWS - SQS Enum
- AWS - S3, Athena & Glacier Enum
- AWS - STS Enum
- AWS - Other Services Enum
- AWS - Security & Detection Services
- AWS - Unauthenticated Enum & Access
- AWS - Accounts Unauthenticated Enum
- AWS - API Gateway Unauthenticated Enum
- AWS - Cloudfront Unauthenticated Enum
- AWS - Cognito Unauthenticated Enum
- AWS - DocumentDB Unauthenticated Enum
- AWS - DynamoDB Unauthenticated Access
- AWS - EC2 Unauthenticated Enum
- AWS - ECR Unauthenticated Enum
- AWS - ECS Unauthenticated Enum
- AWS - Elastic Beanstalk Unauthenticated Enum
- AWS - Elasticsearch Unauthenticated Enum
- AWS - IAM & STS Unauthenticated Enum
- AWS - IoT Unauthenticated Enum
- AWS - Kinesis Video Unauthenticated Enum
- AWS - Lambda Unauthenticated Access
- AWS - Media Unauthenticated Enum
- AWS - MQ Unauthenticated Enum
- AWS - MSK Unauthenticated Enum
- AWS - RDS Unauthenticated Enum
- AWS - Redshift Unauthenticated Enum
- AWS - SQS Unauthenticated Enum
- AWS - S3 Unauthenticated Enum
- Azure Pentesting
- Digital Ocean Pentesting
- IBM Cloud Pentesting