Eduard Schwarzkopf

Topic

Security

A collection of 6 issues

CloudGoat – vulnerable_lambda with Pacu

As I aim to sharpen my cloud security expertise, I embrace the concept of practical, hands-on experience. Rhino Security Labs provides the indispensable tools for this journey. CloudGoat will deploy intentionally vulnerable cloud environments. Yes, intentionally vulnerable! So when you use it yourself, make sure to use a dedicated AWS

Secure Your AWS Account: The Critical Importance of MFA and the Ease of a CloudFormation Stack

The world of cybersecurity is grappling with increasingly complex threats, with sophisticated cyber-attacks becoming the norm rather than an exception. A testament to this is the recent revelation from Microsoft, where the security team uncovered an intrusion by a nation-state actor dubbed Midnight Blizzard. The attack unveiled a critical gap:

I Exposed AWS Access Keys, On Purpose: Here's What I Learned and How I Boosted Incident Response

Introduction Who doesn't know that, you just write a quick fix for your code? After a few hours, the function is finally finished. Proud to have finally done it. Your Brain, toast. Your commit, fast. Pushing your credentials without realising, even faster! Let's find out what happens next. It happens

Reverse engineering an API with Burp Suite

As I've mentioned in my previous post, this method is more suited for penetration testing, since we are going to use Burp Suite for this, which we can use later for more research on an API. Preparation Again you need to make sure we've got all tools installed and set

Reverse engineering an API with Postman

In this tutorial I want to show you how to reverse engineer an API and then use it in Postman. Preparation Before you can get started, you first need to make some preparations so that requests from an API can be saved. FoxyProxy Install FoxyProxy for your Browser, it is

Let's hack my wifi - Part 1

Today I tried to hack my wifi, this is what I've learned