Cloud Security

It walks through privilege escalation paths (iam:PassRole chains, metadata server abuse, confused deputy attacks), container escapes, and IaC misconfiguration hunting with tools like Pacu, Peirates, and Prowler. The source material is dense with actual commands and attack chains, from IMDSv2 bypasses to Lambda role escalation to Kubernetes privileged pod escapes. Use this when you're doing offensive cloud security work and need the specific AWS CLI incantations or GCP metadata endpoints without digging through scattered documentation. The kill chain mapping suggests it fits between recon and exploitation phases, which tracks with the content.