Attack the Cloud: AWS Security Workshop

A practical security workshop on common AWS misconfigurations and how attackers exploit them.

In this workshop, you will learn how to identify and exploit real-world flaws in AWS setups:

✅ Insecure S3 buckets
✅ Bucket versioning abuse
✅ Leaked secrets in Secrets Manager
✅ Vulnerable Lambda functions

---

🚀 Workshop Setup

• Kali Linux
• AWS CLI (awscli)
  Install:

  sudo apt install awscli

• Install Docker and Docker-Compose

  sudo apt install docker.io docker-compose

---

🔥 Running the workshop environment

Clone this repo:

git clone https://github.com/QiaoNPC/FSECSS-AttackTheCloud-Workshop.git
cd FSECSS-AttackTheCloud-Workshop
chmod +x init-scripts/*
sudo docker-compose up

Generated credentials will be saved in: ./creds/workshop.txt

---

🛠️ AWS CLI Command Builder

You can use the AWS CLI Command Builder to help construct commands during the workshop: AWS Command Builder

---

🏹 Labs

Lab	Topic	Link
1	Insecure S3 Buckets	labs/lab1
2	Bucket Versioning	labs/lab2
3	Secrets Manager	labs/lab3
4	Lambda Functions	labs/lab4

---

Happy hacking! 🎯