Scenario

Electra is an Electric Vehicle (EV) company that has recently hit the headlines with their new power-cell technology. With this increased scrutiny comes increased risk, and you have been engaged by the company to perform a red team engagement, starting externally as a threat actor would.

• Familiarity with the AWS and Linux command CLI
• Experience with assessing cloud infrastructure (Pwned Labs will definitely help!)
• Basic knowledge of web vulnerabilities
• Ability to undertake independent research

Real World Context

With many organizations embracing hybrid-cloud architectures, it's critical that they thoroughly examine and lock down their services. Any misconfigurations and overly permissive policies can allow threat actors to gain a foothold and move laterally across services, potentially resulting in reputational damage, loss of business continuity and financial loss! Learn to prevent this from happening in your own organization!