Cloud Security Writeups

Welcome to my personal repository of cloud security lab walkthroughs and writeups. This project is focused on practical, real-world challenges across a variety of platforms and services to help sharpen offensive cloud skills.

🧠 Labs Covered

• PwnedLabs
  AWS-based misconfiguration labs covering enumeration, credential abuse, and privilege escalation.
• CloudGoat (Coming Soon)
  Scenarios by Rhino Security Labs simulating vulnerable AWS environments.
• flaws.cloud (Coming Soon)
  Challenges designed to teach the fundamentals of AWS misconfigurations.

📂 Structure

cloud-sec-writeups/
├── pwnedlabs/
│   ├── account-id-enum/
│   │   ├── writeup.md
│   │   └── images/
│   └── breach-in-the-cloud/
│       ├── writeup.md
│       └── images/
├── README.md

🛠️ Tools & Techniques Used

• nmap, aws cli, CloudTrail analysis
• IAM misconfiguration abuse
• S3 bucket enumeration & brute-forcing
• AssumeRole attacks

🧑‍💻 Author

sparrowjumpy — A passionate learner building a career in cloud security. Follow my journey on GitHub for more writeups and lab notes.

🚧 Disclaimer

All labs are used for educational purposes only in isolated, legal environments. Credentials, secrets, and access keys are redacted.

---

💡 Star this repo to stay updated as new labs like CloudGoat and flaws.cloud are added.