| 2025-08-07 | Tool demo | Blackhat |
AzDevRecon - Azure DevOps Enumeration Tool
| Raunak Parmar | azuredevsecopsiam+1 |
| 2025-08-07 | Tool demo | Blackhat |
Cloud Offensive Breach and Risk Assessment (COBRA)
| Harsha Koushik, Anand Tiwari | cloud-pentestingrisk-managementedr |
| 2025-08-07 | Tool demo | Blackhat |
Kubernetes Goat - A Hands-on Interactive Kubernetes Security Playground
| Madhu Akula | kubernetes |
| 2025-08-07 | Tool demo | Blackhat |
Kubernetes Security Scanner
| Krishna Priya | kubernetes |
| 2025-08-07 | Tool demo | Blackhat |
Spotter – Universal Kubernetes Security Scanner & Policy Enforcer
| Madhu Akula | kubernetes |
| 2025-08-07 | Tool demo | Blackhat |
Halberd : Multi-Cloud Agentic Attack Tool
| Arpan Abani Sarkar | cloud |
| 2025-08-07 | Talk | Blackhat |
Kernel-Enforced DNS Exfiltration Security: Framework Built for Cloud Environments to Stop Data Breaches via DNS at Scale
| Vedang Parasnis | cloud |
| 2025-08-06 | Tool demo | Blackhat |
CloudLens
| Gaurav Joshi, Hare Krishna Rai, Prashant Venkatesh | awscloud-pentestingred-teaming+2 |
| 2025-08-06 | Tool demo | Blackhat |
Varunastra: Securing the Depths of Docker V2
| Devang Solanki | container-securitydockerstatic-analysis+4 |
| 2025-04-04 | Tool demo | Blackhat |
Kubernetes Goat: A Hands-on Interactive Kubernetes Security Playground
| Madhu Akula | kubernetes |
| 2025-04-03 | Tool demo | Blackhat |
KubeSF V1.2 - Kubernetes Security Posture Audit Suite
| Abhishek S, Ajith Prabhu | kubernetes |
| 2025-04-03 | Talk | Blackhat |
Cloud Security: Building Connections in the Cloud
| Vandana Verma Sehgal | cloud |
| 2025-04-03 | Tool demo | Blackhat |
Halberd : Multi-Cloud Security Testing Tool
| Arpan Abani Sarkar | cloud |
| 2024-12-12 | Tool demo | Blackhat |
GoatPen: Hack, Hone, Harden
| Nishant Sharma, Shantanu Kale | aws |
| 2024-12-12 | Tool demo | Blackhat |
RedCloud OS : Cloud Adversary Simulation Operating System
| Yash Bharadwaj, Manish Gupta | redcloudos |
| 2024-11-28 | Tool demo | Blackhat |
AWS Bomber Framework - A Post Exploitation Utility
| Shashank Dubey | aws |
| 2024-11-27 | Talk | Blackhat |
Generative AI in Supply Chain Security: Enhancing Container Protection Amid Regulatory Challenges
| Syed Aamiruddin | ai-securitysupply-chainsupply-chain-security+1 |
| 2024-11-27 | Tool demo | Blackhat |
Varunastra: Securing the Depths of Docker
| Kunal Aggarwal | container-securitydockerpentesting+3 |
| 2024-11-26 | Tool demo | Blackhat |
Halberd: Multi-Cloud Security Testing Tool
| Arpan Abani Sarkar | cloud-pentestingcloud-compliancepentesting+1 |
| 2024-11-15 | Talk | C0c0n |
[Yodha] Nightingale: Docker for Pentesters
| Raja Nagori | dockerpenetration-testing |
| 2024-08-08 | Tool demo | Blackhat |
Cloud Offensive Breach and Risk Assessment (COBRA)
| Anand Tiwari, Harsha Koushik | cloud |
| 2024-05-08 | Talk | Blackhat |
Cloud and Platform Agnostic Security Posture Management (xSPM)
| Sunil Arora | cloud |
| 2024-04-19 | Tool demo | Blackhat |
AWSDefenderGPT: Leveraging OpenAI to Secure AWS Cloud
| Sherin Stephen, Nishant Sharma, Rishappreet Singh Moonga | aws |
| 2024-04-18 | Talk | Blackhat |
Breaking Managed Identity Barriers In Azure Services
| Nitesh Surana | azure |
| 2024-04-18 | Tool demo | Blackhat |
Catching adversaries on Azure - Deception on Cloud
| Subhash Popuri | azurecloud |
| 2024-04-18 | Tool demo | Blackhat |
Nightingale: Docker for Pentesters
| Raja Nagori | docker |
| 2023-12-07 | Tool demo | Blackhat |
Route53Sweep: Empowering AWS Route53 Security with Automated Scanning & Comprehensive Inventory Management
| Divyanshu Shukla, Anjali Singh Shukla | aws |
| 2023-12-06 | Tool demo | Blackhat |
SupplyShield: Protecting your software supply chain
| Akhil Mahendra, Hritik Vijay | awssupply-chainsbom+2 |
| 2023-09-29 | Talk | Hackinparis |
A Tale of Credential Leak of a Popular Cloud Threat Actor
| Nitesh Surana | container-securitydockerthreat-hunting+1 |
| 2023-09-28 | Talk | Rootcon |
Azure Illuminati: Unveiling the Mysteries of Cloud Exploitation
| Raunak Parmar | cloud |
| 2023-09-24 | Panel | Nullcon |
C4CII - SECURING USE OF CLOUD IN CRITICAL INFORMATION INFRASTRUCTURE
| Saikat Datta, Akash Mahajan, Varun Singla, Navin Kumar Singh | cloud |
| 2023-09-23 | Talk | Nullcon |
Uncovering Azure’s Silent Threats: A Journey Into Cloud Vulnerabilities
| Nitesh Surana | azure |
| 2023-08-24 | Tool demo | Hitb Sec Conf |
Vajra
| Raunak Parmar | cloudtool-demo |
| 2023-08-10 | Talk | Blackhat |
Uncovering Azure’s Silent Threats: A Journey into Cloud Vulnerabilities
| Nitesh Surana | cloud |
| 2023-08-09 | Talk | Blackhat |
Identifying and Reducing Permission Explosion in AWS: A Graph-Based and Analytical Approach
| Pankaj Moolrajani | aws |
| 2023-08-07 | Talk | C0c0n |
Serverless Siege: AWS Lambda Pentesting
| Anjali Singh Shukla, Divyanshu Shukla | awsserverlesscloud-pentesting+2 |
| 2023-08-07 | Talk | C0c0n |
Uncovering Azure’s Silent Threats: A Story of Cloud Vulnerabilities
| Nitesh Surana | azurecloud-vulnerabilitiescloud-pentesting+2 |
| 2023-08-06 | Talk | C0c0n |
Mitigating SSRF at scale the right way with IMDSv2!
| Ayush Priya | web-securityapi-securityaws+3 |
| 2023-05-12 | Talk | Blackhat |
Abusing Azure Active Directory: From MFA Bypass to Listing Global Administrators
| Sravan Akkaram | azure |
| 2023-05-12 | Tool demo | Blackhat |
GCPGoat : A Damn Vulnerable GCP Infrastructure
| Shantanu Kale, Rishappreet Singh Moonga, Ravi Verma, Govind Krishna | gcp |
| 2023-05-12 | Tool demo | Blackhat |
Vajra - Your Weapon To Cloud
| Raunak Parmar | cloud |
| 2023-05-11 | Tool demo | Blackhat |
AzureGoat : A Damn Vulnerable Azure Infrastructure
| Nishant Sharma, Dasari Yashwanth Babu | azure |
| 2023-05-11 | Tool demo | Blackhat |
Kubernetes Goat: Interactive Kubernetes Security Learning Playground
| Madhu Akula | kubernetes |
| 2023-05-11 | Tool demo | Blackhat |
Nightingale: Docker for Pentesters
| Raja Nagori | docker |
| 2022-12-08 | Tool demo | Blackhat |
ThunderCloud: Attack Cloud Without Keys!
| Shivankar Madaan | cloud |
| 2022-09-28 | Talk | Rootcon |
AWSGoat : A Damn Vulnerable AWS Infrastructure
| Jeswin Mathai, Shantanu Kale, Sanjeev Mahunta | aws |
| 2022-09-24 | Talk | C0c0n |
Know Your Organization? : Mapping Entities in Google Workspace
| Manish Gupta, Yash Bharadwaj | gcpidentity-managementaccess-management+2 |
| 2022-09-24 | Talk | C0c0n |
In production with GRC for cloud
| Mahesh Kalyanaraman | cloud-compliancegovernancerisk-management+2 |
| 2022-09-23 | Talk | C0c0n |
Common Misconfigurations in your Kubernetes Cluster and What can you do about it?
| Kumar Ashwin | kubernetes |
| 2022-09-08 | Tool demo | Nullcon |
Vajra - Your Weapon To Cloud
| Raunak Parmar | cloud |
| 2022-09-07 | Talk | Nullcon |
Scale hacking to secure your cloud and beyond
| Anand Prakash | cloud |
| 2022-09-06 | Panel | Nullcon |
Cloud Services for Financial Inclusion: Possibilities & Challenges
| Nandkumar Saravade, Ganesh Ar, Himanshu Das, Navin Kumar Singh | cloud |
| 2022-08-10 | Tool demo | Blackhat |
AWSGoat : A Damn Vulnerable AWS Infrastructure
| Nishant Sharma, Jeswin Mathai, Sanjeev Mahunta | aws |
| 2022-08-10 | Tool demo | Blackhat |
AzureGoat : A Damn Vulnerable Azure Infrastructure
| Jeswin Mathai, Nishant Sharma, Rachna Umaraniya | azure |
| 2022-08-10 | Tool demo | Blackhat |
HazProne : Cloud Hacking
| Devansh Patel | cloud |
| 2022-08-10 | Tool demo | Blackhat |
Vajra - Your Weapon To Cloud
| Raunak Parmar | cloud |
| 2022-07-23 | Talk | Hope |
Combating Ransom-War: Evolving Landscape of Ransomware Infections in Cloud Databases
| Aditya K Sood | cloud |
| 2022-05-12 | Tool demo | Blackhat |
Nightingale: Docker for Pentesters
| Raja Nagori | docker |
| 2022-05-12 | Tool demo | Blackhat |
ThunderCloud: Attack Cloud Without Keys!
| Shivankar Madaan | cloud |
| 2021-11-18 | Talk | Hackinparis |
Is it really an intrusion if you get called in?: Mis-configuration based attacks in AWS
| Kavisha Sheth | aws |
| 2021-11-13 | Talk | C0c0n |
Cloud Threat landscape
| Gunjan Chhillar | threat-landscapecloud-compliancecloud-workload-protection+1 |
| 2021-11-11 | Tool demo | Blackhat |
Kubernetes Goat: Interactive Kubernetes Security Learning Playground
| Madhu Akula | kubernetes |
| 2021-11-10 | Tool demo | Blackhat |
Kubestriker: A Blazing Fast Security Auditing Tool
| Vasant Kumar | kubernetes |
| 2021-11-04 | Talk | Ekoparty |
DIAL: Did I just alert Lambda? A centralized security misconfiguration detection system
| Saransh Rana, Divyanshu Mehta, Harsh Varagiya | awssecurity-monitoringiam+2 |
| 2021-08-04 | Tool demo | Blackhat |
Kubestriker: A Blazing Fast Kubernetes Security Auditing Tool
| Pralhad Chaskar, Vasant Kumar | kubernetes |
| 2021-05-06 | Tool demo | Blackhat |
Demystifying the State of Kubernetes Cluster Security - The Cloud Native Way
| Vasant Kumar, Rupali Dash | kubernetescloudaudit+4 |
| 2020-12-09 | Tool demo | Blackhat |
Strafer: A Tool to Detect Infections in Elasticsearch Instances
| Rohit Bansal, Aditya K Sood | cloudblueteampentest+1 |
| 2020-10-07 | Talk | Rootcon |
Zero Trust in the Era of Cloud
| Vandana Verma Sehgal | cloudinfrastructure |
| 2020-09-18 | Talk | C0c0n |
Kubernetes Goat - Vulnerable by Design Kubernetes Cluster Environment
| Madhu Akula | kubernetesinfrastructureredteam |
| 2020-08-06 | Tool demo | Blackhat |
FuzzCube
| Anto Joseph | fuzzingkubernetescloud+1 |
| 2020-03-06 | Tool demo | Nullcon |
VyAPI
| Riddhi Shree | secure-codingawsamazon-cognito+5 |
| 2020-03-06 | Tool demo | Nullcon |
FuzzCube
| Anto Joseph | fuzzingkubernetescloud+1 |
| 2020-03-06 | Tool demo | Nullcon |
Callidus
| Chirag Savla | redteamcloud |
| 2020-03-06 | Talk | Nullcon |
Cloud As an Attack vector
| Ashwin Vamshi, Rushikesh Vishwakarma | cloud |
| 2019-12-04 | Tool demo | Blackhat |
Cloud Security Suite: One Stop Tool for AWS/GCP/Azure/DigitalOcean Security Audit
| Jayesh Chauhan | cloudawsgcp+2 |
| 2019-11-28 | Talk | Deepsec |
Mastering AWS Pentesting and Methodology
| Ankit Giri | awscloudpentest |
| 2019-11-01 | Talk | App Sec Day Australia |
A Purple Team View of Serverless and GraphQL Applications
| Abhay Bhargav | redteamblueteampurpleteam+1 |
| 2019-09-27 | Talk | C0c0n |
VyAPI - The Vulnerable Hybrid Android App
| Riddhi Shree | secure-codingawsamazon-cognito+5 |
| 2019-09-27 | Talk | C0c0n |
Security @scale for startups
| Shivanath Somanathan | devsecopssecure-developmentsoftware-security+2 |
| 2019-09-27 | Talk | C0c0n |
Building a cloud security monitoring and auditing framework
| Nirali Shah, Prasoon Dwivedi | cloudblueteaminfrastructure |
| 2019-09-27 | Talk | C0c0n |
Doing SecOps for the Cloud using Cloud Native Services
| Akash Mahajan | cloudblueteam |
| 2019-09-27 | Talk | C0c0n |
Lessons learned form data breaches in the cloud
| Ajay Agrawal | cloud |
| 2019-09-13 | Talk | Global App Sec |
Real Time Vulnerability Alerting by Using Principles from the United States Tsunami Warning Center
| Amol Sarwate | vulnerability-managementawssecurity-information-event-management+1 |
| 2019-08-08 | Tool demo | Blackhat |
Cloud Security Suite: One-Stop Tool for AWS/GCP/Azure Security Audit
| Jayesh Chauhan | cloudawsgcp+2 |
| 2019-08-08 | Talk | Defcon |
Anatomy of cloud hacking
| Pratik Shah | cloud-pentestingpost-exploitationcloud-architecture+1 |
| 2019-05-09 | Talk | Hitb Sec Conf |
GDALR: Duplicating Black Box Machine Learning Models
| Rewanth Tammana, Nikhil Joshi | machine-learningredteamcloud |
| 2019-03-28 | Tool demo | Blackhat |
Cloud Security Suite: One-Stop Tool for AWS/GCP/Azure Security Audit
| Jayesh Chauhan | pentestblueteamcloud+4 |
| 2019-03-28 | Tool demo | Blackhat |
MLsploit: A Cloud-Based Framework for Adversarial Machine Learning Research
| Nilaksh Das | cloudmachine-learningblueteam |
| 2018-12-06 | Tool demo | Blackhat |
Cloud Security Suite: One Stop Tool forAWS/GCP/Azure Security Audit
| Jayesh Chauhan | cloudawsgcp+2 |
| 2018-10-19 | Talk | App Sec Day Australia |
Continuous Integration and Delivery with Docker Containers
| Vasant Kumar | dockerblueteam |
| 2018-10-05 | Talk | C0c0n |
Unconventional vulnerabilities in Google Cloud Platform
| Pranav Venkat | cloudgcpredteam |
| 2018-10-05 | Talk | C0c0n |
Defending cloud Infrastructures with Cloud Security Suite
| Jayesh Chauhan, Shivankar Madaan | cloud |
| 2018-09-27 | Talk | Rootcon |
Defending cloud Infrastructures with Cloud Security Suite
| Shivankar Madaan | cloudawsinfrastructure+5 |
| 2018-08-11 | Tool demo | Defcon |
Cloud Security Suite—One stop tool for AWS, GCP & Azure Security Audit
| Jayesh Chauhan | cloudawsgcp+2 |
| 2018-08-09 | Tool demo | Blackhat |
Jackhammer: One Security Vulnerability Assessment/Management Tool
| Madhusudhan Konda, Rajagopal Vr, Shreyas Chidambara | webanalysismobile+9 |
| 2018-08-08 | Tool demo | Blackhat |
Cloud Security Suite: One Stop Tool for AWS/GCP/Azure Security Audit
| Divya S John, Jayesh Chauhan, Shivankar Madaan | pentestblueteamcloud+4 |
| 2018-03-23 | Tool demo | Blackhat |
Cloud Security Suite - One Stop Tool for AWS/GCP Security Audit
| Jayesh Chauhan, Shivankar Madaan | cloudawsgcp+2 |
| 2018-03-22 | Tool demo | Blackhat |
Jackhammer - One Security Vulnerability Assessment/Management Tool
| Rajagopal Vr, Krishna Chaitanya Yarramsetty | pentestredteamblueteam+9 |
| 2017-12-30 | Tool demo | Blackhat |
Cloud Security Suite - One Stop Tool for AWS Security Audit
| Shivankar Madaan, Prajal Kulkarni, Jayesh Chauhan | pentestblueteamcloud+4 |
| 2017-08-18 | Talk | C0c0n |
Cloud_Security Suite - One stop tool for auditing cloud infrastructure
| Shivankar Madaan, Jayesh Chauhan | cloudawsinfrastructure+5 |
| 2017-03-03 | Talk | Nullcon |
DevOpSec: Rapid Security in the Cloud with AWS and CIS
| Mikhail Advani, Rajesh Tamhane | devsecopscloudaws+2 |
| 2016-08-19 | Talk | C0c0n |
App Sec in the Time of Docker Containers
| Akash Mahajan | dockermobile |
| 2016-03-11 | Talk | Nullcon |
Making Machines think about security for fun and profit
| Rahul Sasi | Automationblueteamweb+2 |
| 2015-09-24 | Talk | App Sec Usa |
Continuous Cloud Security Automation
| Rohit Pitke | awsdevsecopsAutomation+2 |
| 2015-08-06 | Talk | Blackhat |
Harnessing Intelligence from Malware Repositories
| Arun Lakhotia, Vivek Notani | webcloudanalysis+1 |
| 2015-08-01 | Talk | C0c0n |
S3curi7y at 36K feet
| Rugved Mehta, Gaurav Trivedi | awsazuregcp+3 |
| 2014-02-14 | Talk | Nullcon |
Attacking WPA/WPA2 in the Cloud
| Vivek Ramachandran | networkwifiwpa2+2 |
| 2013-11-07 | Talk | Ground Zero Summit |
Cloud Security: Enabling continuous, scalable security for today’s hyper connected world
| Sumedh Thakar | cloud |
| 2013-08-16 | Talk | Usenix |
Building Securable Infrastructure: Open-Source Private Clouds
| Pravir Chandra | opensourcecloud |
| 2012-12-01 | Talk | Clubhack |
Legal Nuances to the Cloud
| Ritambhara Agrawal | cloudcyber-law |
| 2011-10-08 | Talk | C0c0n |
Stratagemizing Security Against Perpetrators In Cloud Infrastructure
| K S Abhiraj | infrastructureblueteamcloud |
| 2011-10-07 | Talk | C0c0n |
Security and Privacy Risks of Cloud Computing
| Vishnu Tiwari | cloud |
| 2010-08-01 | Talk | C0c0n |
Cloud Computing & Security: Boon or Bane; Hype or Reality; Cloud Implementation Challenges: A Live Case Study
| Krishnakumar Kottekkat, Whiteknight | cloud |
| 2009-11-18 | Talk | Securitybyte |
Cloud Hacking – Distributed Attack & Exploit Platform
| Shreeraj Shah | cloudredteam |