Cloud Penetration Testing

"Cloud-based services now form crucial elements of many business processes... However, these same services are increasingly abused by malicious actors... attack vectors used by eCrime and targeted intrusion adversaries include cloud vulnerability exploitation, credential theft, cloud service provider abuse, use of cloud services for malware hosting and C2, and the exploitation of misconfigured image containers."

- Crowdstrike 2022 Global Threat Report

Cloud environments are often overlooked when it comes to security, and are often the source of many vulnerabilities. This can be down to assumptions that these services come 'secure by default', this is not necessarily the case. Complex technology stacks and environments can contribute to misconfigurations and vulnerabilities, and often require a different approach to testing.

Many cloud environments are configured to their default settings, which are not necessarily the most secure and may allow access to and from unintended or insecure locations or resources. Misconfigurations in this area may allow attackers to gain footholds within internal environments and provide the basis for subsequent lateral movement to more sensitive systems or data.

We perform a mix of manual and automated testing, where a security expert will review your cloud environment, and identify any potential vulnerabilities or attack paths.

Resources

• Crowdstrike 2022 Global Threat Report
• National Cyber Security Centre (NCSC) Cyber Security Design Principles
• Microsoft Azure Security Best Practices
• AWS Security Best Practices