Compromising Terraform & AWS Atlantis Build Jobs
https://jh.live/halborn || Double the demos with Ignacio Dominguez and Carlos Polop of HALBORN -- this time digging into misconfigurations with Infrastructure as Code with Terraform and AWS Atlantis as we've been exploring CI/CD and DevOps offensive security!
This video is released in partnership with HALBORN! You can learn more about security assessments and cloud testing HALBORN does at: https://jh.live/halborn
00:00 Preview
01:02 About Terraform
02:40 Hacking Terraform
07:46 Attack: getting AWS admin access
13:23 About Atlantis
14:56 Hacking Atlantis
19:47 Attack: getting a reverse shell
21:36 Real-world usage examples
🔥 YOUTUBE ALGORITHM ➡ Like, Comment, & Subscribe!
🙏 SUPPORT THE CHANNEL ➡ https://jh.live/patreon
🤝 SPONSOR THE CHANNEL ➡ https://jh.live/sponsor
🌎 FOLLOW ME EVERYWHERE ➡ https://jh.live/discord ↔ https://jh.live/twitter ↔ https://jh.live/linkedin ↔ https://jh.live/instagram ↔ https://jh.live/tiktok
💥 SEND ME MALWARE ➡ https://jh.live/malware
Watch on YouTube ↗
(saves to browser)
Sign in to unlock AI tutor explanation · ⚡30
Playlist
Uploads from John Hammond · John Hammond · 0 of 60
← Previous
Next →
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
![Python [colorama] 00 Installing on Linux](https://i.ytimg.com/vi/oeodA91dO_k/mqdefault.jpg)
18
![Python [colorama] 09 Cursor Position](https://i.ytimg.com/vi/EucPkcOYekE/mqdefault.jpg)
19
![Python [hashlib] 02 Algorithms](https://i.ytimg.com/vi/ESRTg-vbjHM/mqdefault.jpg)
20
21
![Python [pygame] 11 Rectangular Collision Detection](https://i.ytimg.com/vi/57bkG0HytI8/mqdefault.jpg)
22
![Python [pygame] 12 Platforming Rectangular Collision Resolution](https://i.ytimg.com/vi/qgs9Y-lxHA0/mqdefault.jpg)
23
![Python [XML-RPC] 01 Research](https://i.ytimg.com/vi/uOuNajsNztA/mqdefault.jpg)
24
![Python [pyenchant] 03 Personal Word Lists](https://i.ytimg.com/vi/Mb2OkDSlAbk/mqdefault.jpg)
25
![FancyURLopener Authentication and User-Agent [urllib] 03](https://i.ytimg.com/vi/I8d9Dy4P8Sg/mqdefault.jpg)
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
![Hack The Vote 2016 CTF: Sander's Fan Club [web100]](https://i.ytimg.com/vi/leITIf-tzcw/mqdefault.jpg)
44
![Hack The Vote 2016 CTF Warpspeed [forensics150]](https://i.ytimg.com/vi/1PbwQyByfos/mqdefault.jpg)
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
Code Commentaries? PHP to JavaScript in Bash and PHP!
John Hammond
Tutorials? MySQL connection with PHP and Bash!
John Hammond
Variable Naming in Python! Happy Birthday, Linux! Nokia N900!
John Hammond
JavaScript Splits The URL!
John Hammond
HTML Tables in Python!
John Hammond
HTML, Net Shares, GML!
John Hammond
Python 08 Programming Style and Comments
John Hammond
Python 26 Object Oriented Programming
John Hammond
75 Python Tutorials, Out Now!
John Hammond
Batch 14 Mathematical Expressions
John Hammond
Batch 85 Array Append
John Hammond
Batch 86 Array Count
John Hammond
Batch 87 Array Index
John Hammond
Batch 88 Array Insert
John Hammond
Batch 89 Array Remove
John Hammond
Batch 90 Array Reverse
John Hammond
Python [colorama] 00 Installing on Linux
John Hammond
Python [colorama] 09 Cursor Position
John Hammond
Python [hashlib] 02 Algorithms
John Hammond
Python 00 Installing IDLE on Linux
John Hammond
Python [pygame] 11 Rectangular Collision Detection
John Hammond
Python [pygame] 12 Platforming Rectangular Collision Resolution
John Hammond
Python [XML-RPC] 01 Research
John Hammond
Python [pyenchant] 03 Personal Word Lists
John Hammond
FancyURLopener Authentication and User-Agent [urllib] 03
John Hammond
Python 04: PEP8 Coding
John Hammond
Python Challenge! 17 COOKIES
John Hammond
Google CTF 2016: Ernst Echidna
John Hammond
Google CTF 2016: Spotted Quoll
John Hammond
Google CTF 2016: Can you Repo It?
John Hammond
Google CTF 2016: No Big Deal
John Hammond
Google CTF 2016: In Recorded Conversation
John Hammond
Homemade CTF Challenge: 01 "Orchestra"
John Hammond
Homemade CTF Challenge: 02 "Bae's Base"
John Hammond
Homemade CTF Challenge: 03 "Web Hunt"
John Hammond
Homemade CTF Challenge: 04 "UPX"
John Hammond
Homemade CTF Challenge: 05 "The Assumption Song"
John Hammond
Homemade CTF Challenge: 06 "A Brisk Stroll"
John Hammond
Homemade CTF Challenge: 06 "I lost my password!"
John Hammond
web25 :: Mr. Robot : EKOPARTY CTF 2016
John Hammond
web50 : RFC 7230 :: EKOPARTY CTF 2016
John Hammond
misc50 : Hidden inside EKO :: EKOPARTY CTF 2016
John Hammond
Hack The Vote 2016 CTF: Sander's Fan Club [web100]
John Hammond
Hack The Vote 2016 CTF Warpspeed [forensics150]
John Hammond
Juniors CTF 2016 :: Black Suprematic Square
John Hammond
Juniors CTF 2016 :: Six Strange Tales
John Hammond
Juniors CTF 2016 :: Lost Code
John Hammond
Juniors CTF 2016 :: Here Goes!
John Hammond
Juniors CTF 2016 :: Southern Cross
John Hammond
Juniors CTF 2016 :: Clone Attack
John Hammond
Juniors CTF 2016 :: Dirty Repo
John Hammond
Juniors CTF 2016 :: Hackers Blog
John Hammond
Juniors CTF 2016 :: Voting!!!
John Hammond
Juniors CTF 2016 :: The Good, The Bad and The Junkman
John Hammond
Juniors CTF 2016 :: Stop Thief!
John Hammond
Juniors CTF 2016 :: ROFL
John Hammond
Juniors CTF 2016 :: Restriced Area
John Hammond
Juniors CTF 2016 :: Oh SSH!
John Hammond
HackCon CTF 2017 TRIVIA and BONUS Challenges
John Hammond
HackCon CTF 2017 "Bacche" Challenges
John Hammond
More on: Tool Use & Function Calling
View skill →
Related AI Lessons
⚡
⚡
⚡
⚡
Anthropic acquires Stainless to improve Claude developer tools
Medium · AI
35 ChatGPT Prompts for Fundraising Managers: Raise More, Write Better, and Build Stronger Donor Relationships
Dev.to · ClawGear
I Built 3 Free AI Tools in 3 Hours - Here Is How
Dev.to AI
I Tested 10 AI-Powered APIs for Developers So You Don't Have To
Dev.to · Yury
Chapters (8)
Preview
1:02
About Terraform
2:40
Hacking Terraform
7:46
Attack: getting AWS admin access
13:23
About Atlantis
14:56
Hacking Atlantis
19:47
Attack: getting a reverse shell
21:36
Real-world usage examples
🎓
Tutor Explanation
DeepCamp AI