Shantanu Kale

Technology Generalist | Presenter @defcon @BlackHatEvents | Trainer @rootc0n

[Shantanu Kale @4_r43]

@nush159 Cool idea, site seems to be down rn. DNS error

[Shantanu Kale @4_r43]

@AWSSupport Looks like its working now

[Shantanu Kale @4_r43]

@AWSSupport Looks like AWS IAM Role creation is facing some issues, unable to create any new roles.

Tested across multiple accounts.

Anyone else facing this issue?

#AWS #AWSDown

[Shantanu Kale @4_r43]

@AWSSupport Looks like AWS IAM Role creation is facing some issues, unable to create any new roles.

Tested across multiple accounts.

Anyone else facing this issue?

#AWS #AWSDown

[Graham Campbell 🐘 @GrahamJCampbell]

Anyone else noticed that AWS have broken creating a lambda function from the console? Crashes with "The role defined for the function cannot be assumed by Lambda." even though AWS is creating the role (and the correct service principal is set).

[Shantanu Kale @4_r43]

@AWSSupport Is anyone having problems deploying new lambda functions, getting this error across multiple regions, and multiple accounts across different orgs.

Having this issue with newly created IAM Lambda Service roles.
#AWS #PartiallyDown

[Nishant Sharma @nishantsharmax]

@Hax0rGuy, @4_r43, Litesh Ghute and D. Yashwanth babu from INE lab team delivered two 1-day paid trainings on "Attacking Serverless Applications" and "Active Directory Pentesting" at @root conference.

ROOTCON is the biggest cybersecurity conference of Philippines, and this was our 3rd consecutive year conducting trainings there.

Thanks for involving us and your contribution to community @semprix, @shipcod3 and Team!!

#infosec #cybersecurity #rootcon

cc @INEsecurity @securitytube

[Nishant Sharma @nishantsharmax]

We released AWSGoat 1 year ago at Blackhat USA Arsenal and DEF CON Demo labs 2022.

Stats:
- 2 modules, 11 attack and 4 defense manuals
- 1480 stars, 707 forks, 70000+ Hits on GitHub page

Want to contribute? DMs open.

https://t.co/5OT1nCNWHr

#cloudsecurity #aws #awssecurity

[Shantanu Kale @4_r43]

Whether you're interested in cloud technologies, cybersecurity, or networking, @INE offers an extensive catalog of labs that will blow your mind and give you a chance to dive into hands-on exercises and gain practical skills in cutting-edge domains. Try some of them for FREE!!!

[INE @ine]

Curious about what all the buzz is with INE's lab experience? 🤔 Test it out for yourself (for FREE) with this curated list of cloud, cybersecurity and networking labs.

Try now: https://t.co/oMf9PNtDht

#cybersecuritytraining #networktraining #ITtraining

[Cloud Security Podcast @CloudSecPod]

Have you heard of AWS Goat? It's a vulnerable by design infrastructure that you could use as a way to learn about cloud pentesting and AWS Security

@nishantsharmax shared all about it on @CloudSecPod

#awssecurity #cloudsecurity #cybersecurity

[Nishant Sharma @nishantsharmax]

[AWSGoat Update]

Added 4 Defense manuals on how to use Amazon Macie, AWS Config, Amazon GuardDuty, and AWS IAM Access Analyzer to detect the issues/misconfigurations in AWSGoat deployment.

Link: https://t.co/ZRwYJRfkRg

cc @ine, @SecurityTube

#awssecurity #cloudsecurity

[Nishant Sharma @nishantsharmax]

Our open-source project #AWSGoat has reached 1000 stars on Github!

#AzureGoat and #GCPGoat have also touched 300 and 200 stars.

@ine lab team is humbled to see how our work has resonated with many people!

https://t.co/5OT1nCNWHr

cc @SecurityTube

[Nishant Sharma @nishantsharmax]

Automation accounts in #Azure allow you to automate your tasks and workflows, reducing the potential for human error and increasing efficiency. However, a misconfigured automation account can be exploited to escalate privileges and gain access to sensitive information.

(1/2)

[Nishant Sharma @nishantsharmax]

Bucket misconfigurations can occur when the settings for a cloud storage bucket are not properly configured. Some reasons for this are accidentally making the bucket publicly accessible, not setting the appropriate access controls etc.

(1/3)

[Nishant Sharma @nishantsharmax]

As cloud-based services continue to grow, it's important to consider the security implications of using these platforms. One type of attack that can be particularly devastating is Server-Side Request Forgery (SSRF).

(1/4)

[Nishant Sharma @nishantsharmax]

I am happy to share that @ine lab platform team has released GCPGoat today!

Good work @jeswinMathai,@s0ulix_,@4_r43, @lastMinuteBoi and team! cc @SecurityTube

GitHub: https://t.co/3W3v0pnAWQ

Feel free to reshare and spread the word!

#gcpcloud #CloudSecurity

[INE @ine]

Our small yet mighty India team was also in Singapore this week with the leadership team! We're grateful for all of their hard work to keep @INE, @eLearnSecurity, and @SecurityTube up and running!

#INETeam

[Vivek Ramachandran @vivekramac]

It was awesome finally getting to meet the Providence Equity Partners and INE management team one year after they acquired Pentester Academy! Brian Kelly and I did a little whiteboard contract to commemorate the deal :-)

[INE @ine]

#INE is in Singapore! The North American team is enjoying dinner after a leadership summit with our #Singapore office. As an #international company in our current times, it's rare to get everyone together to fellowship. We're excited when we can be face-to-face. #team

[Vivek Ramachandran @vivekramac]

As we accelerate towards greater ambitions, it's awesome to welcome so many smart folks into our team!

Big announcements coming! Stay Tuned!