🧪 Experimental Feature

Focus Areas are an experimental feature that groups related content by tags. This page and its functionality may change as we refine the categorization system.

Cloud Security

Security for cloud infrastructure and services

114
Total Entries
103
Contributors
79
Unique Tags
33
Related Tags

Top Contributors

Jayesh Chauhan(10) Shivankar Madaan(8) Madhu Akula(6) Raunak Parmar(6) Nishant Sharma(5)

Related Tags (14)

Show all 14 tags...

All Entries (114 total, sorted by date)

DateTypeConferenceTitleSpeaker(s)Tags
2025-08-07Tool demoBlackhat AzDevRecon - Azure DevOps Enumeration Tool Source Code Raunak Parmarazuredevsecopsiam+1
2025-08-07Tool demoBlackhat Cloud Offensive Breach and Risk Assessment (COBRA) Harsha Koushik, Anand Tiwaricloud-pentestingrisk-managementedr
2025-08-07Tool demoBlackhat Kubernetes Goat - A Hands-on Interactive Kubernetes Security Playground Source Code Madhu Akulakubernetes
2025-08-07Tool demoBlackhat Kubernetes Security Scanner Krishna Priyakubernetes
2025-08-07Tool demoBlackhat Spotter – Universal Kubernetes Security Scanner & Policy Enforcer Madhu Akulakubernetes
2025-08-07Tool demoBlackhat Halberd : Multi-Cloud Agentic Attack Tool Arpan Abani Sarkarcloud
2025-08-07TalkBlackhat Kernel-Enforced DNS Exfiltration Security: Framework Built for Cloud Environments to Stop Data Breaches via DNS at Scale Vedang Parasniscloud
2025-08-06Tool demoBlackhat CloudLens Gaurav Joshi, Hare Krishna Rai, Prashant Venkateshawscloud-pentestingred-teaming+2
2025-08-06Tool demoBlackhat Varunastra: Securing the Depths of Docker V2 Source Code Devang Solankicontainer-securitydockerstatic-analysis+4
2025-04-04Tool demoBlackhat Kubernetes Goat: A Hands-on Interactive Kubernetes Security Playground Source Code Madhu Akulakubernetes
2025-04-03Tool demoBlackhat KubeSF V1.2 - Kubernetes Security Posture Audit Suite Abhishek S, Ajith Prabhukubernetes
2025-04-03TalkBlackhat Cloud Security: Building Connections in the Cloud Vandana Verma Sehgalcloud
2025-04-03Tool demoBlackhat Halberd : Multi-Cloud Security Testing Tool Source Code Arpan Abani Sarkarcloud
2024-12-12Tool demoBlackhat GoatPen: Hack, Hone, Harden Source Code Nishant Sharma, Shantanu Kaleaws
2024-12-12Tool demoBlackhat RedCloud OS : Cloud Adversary Simulation Operating System Source Code Yash Bharadwaj, Manish Guptaredcloudos
2024-11-28Tool demoBlackhat AWS Bomber Framework - A Post Exploitation Utility Shashank Dubeyaws
2024-11-27TalkBlackhat Generative AI in Supply Chain Security: Enhancing Container Protection Amid Regulatory Challenges Syed Aamiruddinai-securitysupply-chainsupply-chain-security+1
2024-11-27Tool demoBlackhat Varunastra: Securing the Depths of Docker Source Code Kunal Aggarwalcontainer-securitydockerpentesting+3
2024-11-26Tool demoBlackhat Halberd: Multi-Cloud Security Testing Tool Source Code Arpan Abani Sarkarcloud-pentestingcloud-compliancepentesting+1
2024-11-15TalkC0c0n [Yodha] Nightingale: Docker for Pentesters Source Code Raja Nagoridockerpenetration-testing
2024-08-08Tool demoBlackhat Cloud Offensive Breach and Risk Assessment (COBRA) Source Code Anand Tiwari, Harsha Koushikcloud
2024-05-08TalkBlackhat Cloud and Platform Agnostic Security Posture Management (xSPM) Video Sunil Aroracloud
2024-04-19Tool demoBlackhat AWSDefenderGPT: Leveraging OpenAI to Secure AWS Cloud Source Code Sherin Stephen, Nishant Sharma, Rishappreet Singh Moongaaws
2024-04-18TalkBlackhat Breaking Managed Identity Barriers In Azure Services Presentation Nitesh Suranaazure
2024-04-18Tool demoBlackhat Catching adversaries on Azure - Deception on Cloud Source Code Subhash Popuriazurecloud
2024-04-18Tool demoBlackhat Nightingale: Docker for Pentesters Source Code Raja Nagoridocker
2023-12-07Tool demoBlackhat Route53Sweep: Empowering AWS Route53 Security with Automated Scanning & Comprehensive Inventory Management Source Code Divyanshu Shukla, Anjali Singh Shuklaaws
2023-12-06Tool demoBlackhat SupplyShield: Protecting your software supply chain Source Code Akhil Mahendra, Hritik Vijayawssupply-chainsbom+2
2023-09-29TalkHackinparis A Tale of Credential Leak of a Popular Cloud Threat Actor Nitesh Suranacontainer-securitydockerthreat-hunting+1
2023-09-28TalkRootcon Azure Illuminati: Unveiling the Mysteries of Cloud Exploitation Video Raunak Parmarcloud
2023-09-24PanelNullcon C4CII - SECURING USE OF CLOUD IN CRITICAL INFORMATION INFRASTRUCTURE Saikat Datta, Akash Mahajan, Varun Singla, Navin Kumar Singhcloud
2023-09-23TalkNullcon Uncovering Azure’s Silent Threats: A Journey Into Cloud Vulnerabilities Presentation Video Nitesh Suranaazure
2023-08-24Tool demoHitb Sec Conf Vajra Source Code Raunak Parmarcloudtool-demo
2023-08-10TalkBlackhat Uncovering Azure’s Silent Threats: A Journey into Cloud Vulnerabilities Presentation Nitesh Suranacloud
2023-08-09TalkBlackhat Identifying and Reducing Permission Explosion in AWS: A Graph-Based and Analytical Approach Presentation Pankaj Moolrajaniaws
2023-08-07TalkC0c0n Serverless Siege: AWS Lambda Pentesting Video Anjali Singh Shukla, Divyanshu Shuklaawsserverlesscloud-pentesting+2
2023-08-07TalkC0c0n Uncovering Azure’s Silent Threats: A Story of Cloud Vulnerabilities Video Nitesh Suranaazurecloud-vulnerabilitiescloud-pentesting+2
2023-08-06TalkC0c0n Mitigating SSRF at scale the right way with IMDSv2! Video Ayush Priyaweb-securityapi-securityaws+3
2023-05-12TalkBlackhat Abusing Azure Active Directory: From MFA Bypass to Listing Global Administrators Video Sravan Akkaramazure
2023-05-12Tool demoBlackhat GCPGoat : A Damn Vulnerable GCP Infrastructure Source Code Shantanu Kale, Rishappreet Singh Moonga, Ravi Verma, Govind Krishnagcp
2023-05-12Tool demoBlackhat Vajra - Your Weapon To Cloud Source Code Raunak Parmarcloud
2023-05-11Tool demoBlackhat AzureGoat : A Damn Vulnerable Azure Infrastructure Source Code Nishant Sharma, Dasari Yashwanth Babuazure
2023-05-11Tool demoBlackhat Kubernetes Goat: Interactive Kubernetes Security Learning Playground Source Code Madhu Akulakubernetes
2023-05-11Tool demoBlackhat Nightingale: Docker for Pentesters Source Code Raja Nagoridocker
2022-12-08Tool demoBlackhat ThunderCloud: Attack Cloud Without Keys! Source Code Shivankar Madaancloud
2022-09-28TalkRootcon AWSGoat : A Damn Vulnerable AWS Infrastructure Presentation Video Jeswin Mathai, Shantanu Kale, Sanjeev Mahuntaaws
2022-09-24TalkC0c0n Know Your Organization? : Mapping Entities in Google Workspace Manish Gupta, Yash Bharadwajgcpidentity-managementaccess-management+2
2022-09-24TalkC0c0n In production with GRC for cloud Mahesh Kalyanaramancloud-compliancegovernancerisk-management+2
2022-09-23TalkC0c0n Common Misconfigurations in your Kubernetes Cluster and What can you do about it? Kumar Ashwinkubernetes
2022-09-08Tool demoNullcon Vajra - Your Weapon To Cloud Presentation Source Code Raunak Parmarcloud
2022-09-07TalkNullcon Scale hacking to secure your cloud and beyond Video Anand Prakashcloud
2022-09-06PanelNullcon Cloud Services for Financial Inclusion: Possibilities & Challenges Video Nandkumar Saravade, Ganesh Ar, Himanshu Das, Navin Kumar Singhcloud
2022-08-10Tool demoBlackhat AWSGoat : A Damn Vulnerable AWS Infrastructure Source Code Nishant Sharma, Jeswin Mathai, Sanjeev Mahuntaaws
2022-08-10Tool demoBlackhat AzureGoat : A Damn Vulnerable Azure Infrastructure Source Code Jeswin Mathai, Nishant Sharma, Rachna Umaraniyaazure
2022-08-10Tool demoBlackhat HazProne : Cloud Hacking Source Code Devansh Patelcloud
2022-08-10Tool demoBlackhat Vajra - Your Weapon To Cloud Source Code Raunak Parmarcloud
2022-07-23TalkHope Combating Ransom-War: Evolving Landscape of Ransomware Infections in Cloud Databases Aditya K Soodcloud
2022-05-12Tool demoBlackhat Nightingale: Docker for Pentesters Source Code Raja Nagoridocker
2022-05-12Tool demoBlackhat ThunderCloud: Attack Cloud Without Keys! Source Code Shivankar Madaancloud
2021-11-18TalkHackinparis Is it really an intrusion if you get called in?: Mis-configuration based attacks in AWS Kavisha Shethaws
2021-11-13TalkC0c0n Cloud Threat landscape Gunjan Chhillarthreat-landscapecloud-compliancecloud-workload-protection+1
2021-11-11Tool demoBlackhat Kubernetes Goat: Interactive Kubernetes Security Learning Playground Source Code Madhu Akulakubernetes
2021-11-10Tool demoBlackhat Kubestriker: A Blazing Fast Security Auditing Tool Source Code Vasant Kumarkubernetes
2021-11-04TalkEkoparty DIAL: Did I just alert Lambda? A centralized security misconfiguration detection system Source Code Video Saransh Rana, Divyanshu Mehta, Harsh Varagiyaawssecurity-monitoringiam+2
2021-08-04Tool demoBlackhat Kubestriker: A Blazing Fast Kubernetes Security Auditing Tool Source Code Pralhad Chaskar, Vasant Kumarkubernetes
2021-05-06Tool demoBlackhat Demystifying the State of Kubernetes Cluster Security - The Cloud Native Way Source Code Vasant Kumar, Rupali Dashkubernetescloudaudit+4
2020-12-09Tool demoBlackhat Strafer: A Tool to Detect Infections in Elasticsearch Instances Presentation Source Code Rohit Bansal, Aditya K Soodcloudblueteampentest+1
2020-10-07TalkRootcon Zero Trust in the Era of Cloud Presentation Video Vandana Verma Sehgalcloudinfrastructure
2020-09-18TalkC0c0n Kubernetes Goat - Vulnerable by Design Kubernetes Cluster Environment Source Code Video Madhu Akulakubernetesinfrastructureredteam
2020-08-06Tool demoBlackhat FuzzCube Source Code Anto Josephfuzzingkubernetescloud+1
2020-03-06Tool demoNullcon VyAPI Source Code Riddhi Shreesecure-codingawsamazon-cognito+5
2020-03-06Tool demoNullcon FuzzCube Source Code Anto Josephfuzzingkubernetescloud+1
2020-03-06Tool demoNullcon Callidus Source Code Chirag Savlaredteamcloud
2020-03-06TalkNullcon Cloud As an Attack vector Presentation Video Ashwin Vamshi, Rushikesh Vishwakarmacloud
2019-12-04Tool demoBlackhat Cloud Security Suite: One Stop Tool for AWS/GCP/Azure/DigitalOcean Security Audit Source Code Jayesh Chauhancloudawsgcp+2
2019-11-28TalkDeepsec Mastering AWS Pentesting and Methodology Video Ankit Giriawscloudpentest
2019-11-01TalkApp Sec Day Australia A Purple Team View of Serverless and GraphQL Applications Abhay Bhargavredteamblueteampurpleteam+1
2019-09-27TalkC0c0n VyAPI - The Vulnerable Hybrid Android App Presentation Source Code Riddhi Shreesecure-codingawsamazon-cognito+5
2019-09-27TalkC0c0n Security @scale for startups Shivanath Somanathandevsecopssecure-developmentsoftware-security+2
2019-09-27TalkC0c0n Building a cloud security monitoring and auditing framework Nirali Shah, Prasoon Dwivedicloudblueteaminfrastructure
2019-09-27TalkC0c0n Doing SecOps for the Cloud using Cloud Native Services Akash Mahajancloudblueteam
2019-09-27TalkC0c0n Lessons learned form data breaches in the cloud Ajay Agrawalcloud
2019-09-13TalkGlobal App Sec Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center Amol Sarwatevulnerability-managementawssecurity-information-event-management+1
2019-08-08Tool demoBlackhat Cloud Security Suite: One-Stop Tool for AWS/GCP/Azure Security Audit Source Code Jayesh Chauhancloudawsgcp+2
2019-08-08TalkDefcon Anatomy of cloud hacking Pratik Shahcloud-pentestingpost-exploitationcloud-architecture+1
2019-05-09TalkHitb Sec Conf GDALR: Duplicating Black Box Machine Learning Models Presentation Video Rewanth Tammana, Nikhil Joshimachine-learningredteamcloud
2019-03-28Tool demoBlackhat Cloud Security Suite: One-Stop Tool for AWS/GCP/Azure Security Audit Source Code Jayesh Chauhanpentestblueteamcloud+4
2019-03-28Tool demoBlackhat MLsploit: A Cloud-Based Framework for Adversarial Machine Learning Research Source Code Nilaksh Dascloudmachine-learningblueteam
2018-12-06Tool demoBlackhat Cloud Security Suite: One Stop Tool forAWS/GCP/Azure Security Audit Source Code Jayesh Chauhancloudawsgcp+2
2018-10-19TalkApp Sec Day Australia Continuous Integration and Delivery with Docker Containers Video Vasant Kumardockerblueteam
2018-10-05TalkC0c0n Unconventional vulnerabilities in Google Cloud Platform Pranav Venkatcloudgcpredteam
2018-10-05TalkC0c0n Defending cloud Infrastructures with Cloud Security Suite Source Code Jayesh Chauhan, Shivankar Madaancloud
2018-09-27TalkRootcon Defending cloud Infrastructures with Cloud Security Suite Presentation Source Code Video Shivankar Madaancloudawsinfrastructure+5
2018-08-11Tool demoDefcon Cloud Security Suite—One stop tool for AWS, GCP & Azure Security Audit Source Code Jayesh Chauhancloudawsgcp+2
2018-08-09Tool demoBlackhat Jackhammer: One Security Vulnerability Assessment/Management Tool Source Code Madhusudhan Konda, Rajagopal Vr, Shreyas Chidambarawebanalysismobile+9
2018-08-08Tool demoBlackhat Cloud Security Suite: One Stop Tool for AWS/GCP/Azure Security Audit Source Code Divya S John, Jayesh Chauhan, Shivankar Madaanpentestblueteamcloud+4
2018-03-23Tool demoBlackhat Cloud Security Suite - One Stop Tool for AWS/GCP Security Audit Source Code Jayesh Chauhan, Shivankar Madaancloudawsgcp+2
2018-03-22Tool demoBlackhat Jackhammer - One Security Vulnerability Assessment/Management Tool Source Code Rajagopal Vr, Krishna Chaitanya Yarramsettypentestredteamblueteam+9
2017-12-30Tool demoBlackhat Cloud Security Suite - One Stop Tool for AWS Security Audit Source Code Shivankar Madaan, Prajal Kulkarni, Jayesh Chauhanpentestblueteamcloud+4
2017-08-18TalkC0c0n Cloud_Security Suite - One stop tool for auditing cloud infrastructure Source Code Shivankar Madaan, Jayesh Chauhancloudawsinfrastructure+5
2017-03-03TalkNullcon DevOpSec: Rapid Security in the Cloud with AWS and CIS Presentation Video Mikhail Advani, Rajesh Tamhanedevsecopscloudaws+2
2016-08-19TalkC0c0n App Sec in the Time of Docker Containers Akash Mahajandockermobile
2016-03-11TalkNullcon Making Machines think about security for fun and profit Presentation Rahul SasiAutomationblueteamweb+2
2015-09-24TalkApp Sec Usa Continuous Cloud Security Automation Video Rohit PitkeawsdevsecopsAutomation+2
2015-08-06TalkBlackhat Harnessing Intelligence from Malware Repositories Presentation Video Arun Lakhotia, Vivek Notaniwebcloudanalysis+1
2015-08-01TalkC0c0n S3curi7y at 36K feet Rugved Mehta, Gaurav Trivediawsazuregcp+3
2014-02-14TalkNullcon Attacking WPA/WPA2 in the Cloud Presentation Video Vivek Ramachandrannetworkwifiwpa2+2
2013-11-07TalkGround Zero Summit Cloud Security: Enabling continuous, scalable security for today’s hyper connected world Sumedh Thakarcloud
2013-08-16TalkUsenix Building Securable Infrastructure: Open-Source Private Clouds Pravir Chandraopensourcecloud
2012-12-01TalkClubhack Legal Nuances to the Cloud Presentation Video Ritambhara Agrawalcloudcyber-law
2011-10-08TalkC0c0n Stratagemizing Security Against Perpetrators In Cloud Infrastructure K S Abhirajinfrastructureblueteamcloud
2011-10-07TalkC0c0n Security and Privacy Risks of Cloud Computing Vishnu Tiwaricloud
2010-08-01TalkC0c0n Cloud Computing & Security: Boon or Bane; Hype or Reality; Cloud Implementation Challenges: A Live Case Study Krishnakumar Kottekkat, Whiteknightcloud
2009-11-18TalkSecuritybyte Cloud Hacking – Distributed Attack & Exploit Platform Shreeraj Shahcloudredteam