You're reading from Cloud Penetration Testing Learn how to effectively pentest AWS, Azure, and GCP applications

Product type Paperback

Published in Nov 2023

Publisher Packt

ISBN-13 9781803248486

Length 298 pages

Edition 1st Edition

Tools

AWS

Concepts

Cloud Security

Author (1):

Kim Crawley

View More author details

Table of Contents (20) Chapters

Preface

1. Part 1: Today’s Cloud Networks and Their Security Implications FREE CHAPTER

2. Chapter 1: How Do Enterprises Utilize and Implement Cloud Networks?

3. Chapter 2: How Are Cloud Networks Cyber Attacked?

4. Chapter 3: Key Concepts for Pentesting Today’s Cloud Networks

5. Part 2: Pentesting AWS

6. Chapter 4: Security Features in AWS

7. Chapter 5: Pentesting AWS Features through Serverless Applications and Tools

8. Chapter 6: Pentesting Containerized Applications in AWS

9. Part 3: Pentesting Microsoft Azure

10. Chapter 7: Security Features in Azure

11. Chapter 8: Pentesting Azure Features through Serverless Applications and Tools

12. Chapter 9: Pentesting Containerized Applications in Azure

13. Part 4: Pentesting GCP

14. Chapter 10: Security Features in GCP

15. Chapter 11: Pentesting GCP Features through Serverless Applications and Tools

16. Chapter 12: Pentesting Containerized Applications in GCP

17. Chapter 13: Best Practices and Summary

18. Index

Why subscribe?

19. Other Books You May Enjoy

Docker and Kubernetes pentesting techniques in Azure

Let’s explore some tools to pentest containers in Azure.

kube-hunter

The first pentesting application we’ll try is kube-hunter by Aqua Security on GitHub. The introduction in the kube-hunter README file at https://github.com/aquasecurity/kube-hunter/blob/main/README.md states the following:

“kube-hunter hunts for security weaknesses in Kubernetes clusters. The tool was developed to increase awareness and visibility for security issues in Kubernetes environments. You should NOT run kube-hunter on a Kubernetes cluster that you don’t own!”

Absolutely! That’s why we set up our own Kubernetes cluster in our own Azure services in this chapter. When you’re actually doing paid work as a pentester, you will need signed legal permission from the company that owns the Azure network and Kubernetes instance.

There are lots of different kinds of scans you can do with kube-hunter....