# Ethical Hacking en AWS - \[CPNA]

## CPNA

- [La Biblia del Hacking en AWS](https://books.spartan-cybersec.com/cpna/la-biblia-del-hacking-en-aws.md): Desarrollado por Spartan-Cybersecurity
- [ADVERTENCIA](https://books.spartan-cybersec.com/cpna/la-biblia-del-hacking-en-aws/advertencia.md)
- [AWS Community Builder](https://books.spartan-cybersec.com/cpna/la-biblia-del-hacking-en-aws/aws-community-builder.md)
- [Conoce a tu academia](https://books.spartan-cybersec.com/cpna/la-biblia-del-hacking-en-aws/conoce-a-tu-academia.md)
- [Conoce a tu instructor](https://books.spartan-cybersec.com/cpna/la-biblia-del-hacking-en-aws/conoce-a-tu-instructor.md)
- [Aprende con nuestro curso](https://books.spartan-cybersec.com/cpna/la-biblia-del-hacking-en-aws/aprende-con-nuestro-curso.md)
- [Aprende con Spartan-CPNA](https://books.spartan-cybersec.com/cpna/la-biblia-del-hacking-en-aws/aprende-con-spartan-cpna.md)
- [¿Que es Cloud Computing?](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/que-es-cloud-computing.md)
- [Amazon Web Services](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/amazon-web-services.md)
- [La historia detras de la transicion de On-Premises a la nube](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/la-historia-detras-de-la-transicion-de-on-premises-a-la-nube.md)
- [Caracteristicas de On-Premises y Transición a la Nube](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/la-historia-detras-de-la-transicion-de-on-premises-a-la-nube/caracteristicas-de-on-premises-y-transicion-a-la-nube.md)
- [Importancia del cloud computing](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/importancia-del-cloud-computing.md)
- [¿Vale la pena aprender cloud?](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/vale-la-pena-aprender-cloud.md)
- [Modelos de informática en la nube](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/modelos-de-informatica-en-la-nube.md)
- [Infraestructura y Modelos de Despliegue en la Nube](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/infraestructura-y-modelos-de-despliegue-en-la-nube.md)
- [Quiero aprender mas sobre la nube de AWS](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/quiero-aprender-mas-sobre-la-nube-de-aws.md)
- [Proveedores Principales de Cloud Computing](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/proveedores-principales-de-cloud-computing.md)
- [Amazon Web Services (AWS)](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/proveedores-principales-de-cloud-computing/amazon-web-services-aws.md)
- [Microsoft Azure (Az)](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/proveedores-principales-de-cloud-computing/microsoft-azure-az.md)
- [Google Cloud Platform (GCP)](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/proveedores-principales-de-cloud-computing/google-cloud-platform-gcp.md)
- [Comparación entre Proveedores](https://books.spartan-cybersec.com/cpna/introduccion-al-cloud-computing/proveedores-principales-de-cloud-computing/comparacion-entre-proveedores.md)
- [Introduccion a los componentes principales de la nube](https://books.spartan-cybersec.com/cpna/componentes-clave-y-tecnologias-en-la-nube/introduccion-a-los-componentes-principales-de-la-nube.md)
- [Clasificación de los componentes de AWS](https://books.spartan-cybersec.com/cpna/componentes-clave-y-tecnologias-en-la-nube/clasificacion-de-los-componentes-de-aws.md)
- [Virtualización: Conceptos Básicos y su Papel en la Nube](https://books.spartan-cybersec.com/cpna/componentes-clave-y-tecnologias-en-la-nube/virtualizacion-conceptos-basicos-y-su-papel-en-la-nube.md)
- [Introduccion a la Computación sin Servidor (Serverless)](https://books.spartan-cybersec.com/cpna/componentes-clave-y-tecnologias-en-la-nube/introduccion-a-la-computacion-sin-servidor-serverless.md)
- [Diferencias entre Monolítica y Serverless](https://books.spartan-cybersec.com/cpna/componentes-clave-y-tecnologias-en-la-nube/introduccion-a-la-computacion-sin-servidor-serverless/diferencias-entre-monolitica-y-serverless.md)
- [Seguridad en la nube](https://books.spartan-cybersec.com/cpna/seguridad-y-cumplimiento-en-la-nube/seguridad-en-la-nube.md)
- [Modelo de responsabilidad compartida](https://books.spartan-cybersec.com/cpna/seguridad-y-cumplimiento-en-la-nube/modelo-de-responsabilidad-compartida.md)
- [Mejores Prácticas de Seguridad en la Nube](https://books.spartan-cybersec.com/cpna/seguridad-y-cumplimiento-en-la-nube/mejores-practicas-de-seguridad-en-la-nube.md)
- [Cumplimiento y Normativas](https://books.spartan-cybersec.com/cpna/seguridad-y-cumplimiento-en-la-nube/cumplimiento-y-normativas.md)
- [CIS Benchmarks](https://books.spartan-cybersec.com/cpna/seguridad-y-cumplimiento-en-la-nube/cis-benchmarks.md)
- [Introduccion al Curso Profesional de Pentesting para Juniors - \[CPPJ\]](https://books.spartan-cybersec.com/cpna/fundamentos-ofensivos/introduccion-al-curso-profesional-de-pentesting-para-juniors-cppj.md)
- [¿Por qué los atacantes van tras la nube?](https://books.spartan-cybersec.com/cpna/fundamentos-ofensivos/por-que-los-atacantes-van-tras-la-nube.md)
- [¿Qué es un Red Team?](https://books.spartan-cybersec.com/cpna/fundamentos-ofensivos/que-es-un-red-team.md)
- [Assume breach](https://books.spartan-cybersec.com/cpna/fundamentos-ofensivos/que-es-un-red-team/assume-breach.md)
- [¿Qué es un Pentesting?](https://books.spartan-cybersec.com/cpna/fundamentos-ofensivos/que-es-un-pentesting.md)
- [Diferencias entre un pentest tradicional y un pentest cloud](https://books.spartan-cybersec.com/cpna/fundamentos-ofensivos/que-es-un-pentesting/diferencias-entre-un-pentest-tradicional-y-un-pentest-cloud.md)
- [Instalacion de Kali Linux en local](https://books.spartan-cybersec.com/cpna/fundamentos-ofensivos/instalacion-de-kali-linux-en-local.md)
- [Crea tu cuenta de AWS](https://books.spartan-cybersec.com/cpna/fundamentos-ofensivos/crea-tu-cuenta-de-aws.md): Es indispensable tener tu propia cuenta de AWS para desplegar tus laboratorios y realizar ejercicios practicos.
- [MITRE](https://books.spartan-cybersec.com/cpna/fundamentos-ofensivos/mitre.md)
- [Tecnicas de OSINT en AWS](https://books.spartan-cybersec.com/cpna/fundamentos-ofensivos/tecnicas-de-osint-en-aws.md)
- [Herramientas y Estrategias de OSINT](https://books.spartan-cybersec.com/cpna/fundamentos-ofensivos/tecnicas-de-osint-en-aws/herramientas-y-estrategias-de-osint.md)
- [Accediendo a los servicios de AWS](https://books.spartan-cybersec.com/cpna/introduccion-a-aws/accediendo-a-los-servicios-de-aws.md): Accediendo a los servicios desde el portal web, SDK/API y la CLI de AWS
- [¿Que es AWS CLI?](https://books.spartan-cybersec.com/cpna/introduccion-a-aws/que-es-aws-cli.md)
- [Estructura de comandos en el CLI de AWS](https://books.spartan-cybersec.com/cpna/introduccion-a-aws/que-es-aws-cli/estructura-de-comandos-en-el-cli-de-aws.md)
- [El whoami de AWS](https://books.spartan-cybersec.com/cpna/introduccion-a-aws/el-whoami-de-aws.md)
- [Almacenamiento de credenciales en archivo plano](https://books.spartan-cybersec.com/cpna/introduccion-a-aws/almacenamiento-de-credenciales-en-archivo-plano.md)
- [Prefijo de ID con IAM](https://books.spartan-cybersec.com/cpna/introduccion-a-aws/almacenamiento-de-credenciales-en-archivo-plano/prefijo-de-id-con-iam.md)
- [Incidentes de seguridad relacionados a AWS](https://books.spartan-cybersec.com/cpna/introduccion-a-aws/incidentes-de-seguridad-relacionados-a-aws.md)
- [Limitaciones en un pentest dentro de AWS](https://books.spartan-cybersec.com/cpna/introduccion-a-aws/limitaciones-en-un-pentest-dentro-de-aws.md)
- [Tu primer Red Team contra AWS](https://books.spartan-cybersec.com/cpna/introduccion-a-iam/tu-primer-red-team-contra-aws.md)
- [¿Que es Identity and Access Management o IAM?](https://books.spartan-cybersec.com/cpna/introduccion-a-iam/que-es-identity-and-access-management-o-iam.md)
- [Politica de IAM](https://books.spartan-cybersec.com/cpna/introduccion-a-iam/politica-de-iam.md)
- [La importancia de las politicas de IAM en la seguridad de AWS](https://books.spartan-cybersec.com/cpna/introduccion-a-iam/politica-de-iam/la-importancia-de-las-politicas-de-iam-en-la-seguridad-de-aws.md)
- [Politicas predefinidas](https://books.spartan-cybersec.com/cpna/introduccion-a-iam/politica-de-iam/politicas-predefinidas.md)
- [Usuario de IAM](https://books.spartan-cybersec.com/cpna/introduccion-a-iam/usuario-de-iam.md)
- [Grupo de IAM](https://books.spartan-cybersec.com/cpna/introduccion-a-iam/grupo-de-iam.md)
- [Rol de IAM](https://books.spartan-cybersec.com/cpna/introduccion-a-iam/rol-de-iam.md)
- [Casos de uso](https://books.spartan-cybersec.com/cpna/introduccion-a-iam/rol-de-iam/casos-de-uso.md)
- [ARN](https://books.spartan-cybersec.com/cpna/introduccion-a-iam/arn.md)
- [¿Que permisos debo solicitar para realizar las pruebas?](https://books.spartan-cybersec.com/cpna/tecnicas-de-enumeracion-en-iam/que-permisos-debo-solicitar-para-realizar-las-pruebas.md)
- [Enumeracion Manual con AWSCLI](https://books.spartan-cybersec.com/cpna/tecnicas-de-enumeracion-en-iam/enumeracion-manual-con-awscli.md)
- [Enumerando usuarios](https://books.spartan-cybersec.com/cpna/tecnicas-de-enumeracion-en-iam/enumeracion-manual-con-awscli/enumerando-usuarios.md)
- [Enumerando grupos](https://books.spartan-cybersec.com/cpna/tecnicas-de-enumeracion-en-iam/enumeracion-manual-con-awscli/enumerando-grupos.md)
- [Enumerando roles](https://books.spartan-cybersec.com/cpna/tecnicas-de-enumeracion-en-iam/enumeracion-manual-con-awscli/enumerando-roles.md)
- [Enumerando politicas](https://books.spartan-cybersec.com/cpna/tecnicas-de-enumeracion-en-iam/enumeracion-manual-con-awscli/enumerando-politicas.md)
- [Enumeracion automatizada por medio de fuerza bruta](https://books.spartan-cybersec.com/cpna/tecnicas-de-enumeracion-en-iam/enumeracion-automatizada-por-medio-de-fuerza-bruta.md)
- [Enumerate-IAM.py](https://books.spartan-cybersec.com/cpna/tecnicas-de-enumeracion-en-iam/enumeracion-automatizada-por-medio-de-fuerza-bruta/enumerate-iam.py.md)
- [CLIAM](https://books.spartan-cybersec.com/cpna/tecnicas-de-enumeracion-en-iam/enumeracion-automatizada-por-medio-de-fuerza-bruta/cliam.md)
- [IAMFinder](https://books.spartan-cybersec.com/cpna/tecnicas-de-enumeracion-en-iam/enumeracion-automatizada-por-medio-de-fuerza-bruta/iamfinder.md)
- [Analisis de vulnerabilidades con herramientas automatizadas](https://books.spartan-cybersec.com/cpna/tecnicas-de-enumeracion-en-iam/analisis-de-vulnerabilidades-con-herramientas-automatizadas.md)
- [Utilizando Prowler](https://books.spartan-cybersec.com/cpna/tecnicas-de-enumeracion-en-iam/analisis-de-vulnerabilidades-con-herramientas-automatizadas/utilizando-prowler.md)
- [Utilizando Cloudsplaining](https://books.spartan-cybersec.com/cpna/tecnicas-de-enumeracion-en-iam/analisis-de-vulnerabilidades-con-herramientas-automatizadas/utilizando-cloudsplaining.md)
- [¿Que es la escalacion de privilegios basada en IAM?](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/que-es-la-escalacion-de-privilegios-basada-en-iam.md)
- [Metodos para la escalacion de privilegios](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/metodos-para-la-escalacion-de-privilegios.md)
- [Permisos de IAM en otros usuarios](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-de-iam-en-otros-usuarios.md)
- [CreateAccessKey](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-de-iam-en-otros-usuarios/createaccesskey.md)
- [CreateLoginProfile](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-de-iam-en-otros-usuarios/createloginprofile.md)
- [UpdateLoginProfile](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-de-iam-en-otros-usuarios/updateloginprofile.md)
- [AddUserToGroup](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-de-iam-en-otros-usuarios/addusertogroup.md)
- [Permisos sobre politicas](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-sobre-politicas.md)
- [CreatePolicyVersion](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-sobre-politicas/createpolicyversion.md)
- [SetDefaultPolicyVersion](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-sobre-politicas/setdefaultpolicyversion.md)
- [AttachUserPolicy](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-sobre-politicas/attachuserpolicy.md)
- [AttachGroupPolicy](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-sobre-politicas/attachgrouppolicy.md)
- [AttachRolePolicy](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-sobre-politicas/attachrolepolicy.md)
- [PutUserPolicy](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-sobre-politicas/putuserpolicy.md)
- [PutGroupPolicy](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-sobre-politicas/putgrouppolicy.md)
- [PutRolePolicy](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permisos-sobre-politicas/putrolepolicy.md)
- [La actualización de una AssumeRolePolicy](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/la-actualizacion-de-una-assumerolepolicy.md)
- [UpdateAssumeRolePolicy](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/la-actualizacion-de-una-assumerolepolicy/updateassumerolepolicy.md)
- [Permiso IAM:PassRole\*](https://books.spartan-cybersec.com/cpna/escalacion-de-privilegios-en-iam/permiso-iam-passrole.md)
- [¿Que es Simple Storage Service o S3?](https://books.spartan-cybersec.com/cpna/introduccion-a-s3/que-es-simple-storage-service-o-s3.md)
- [Politica de buckets](https://books.spartan-cybersec.com/cpna/introduccion-a-s3/politica-de-buckets.md)
- [El riesgo de un bucket configurado como publico](https://books.spartan-cybersec.com/cpna/introduccion-a-s3/el-riesgo-de-un-bucket-configurado-como-publico.md)
- [Enumeracion manual con AWSCLI](https://books.spartan-cybersec.com/cpna/introduccion-a-s3/enumeracion-manual-con-awscli.md)
- [Identificando vulnerabilidades en S3](https://books.spartan-cybersec.com/cpna/introduccion-a-s3/identificando-vulnerabilidades-en-s3.md)
- [Backdorizando un Bucket S3 utilizando la politica del Bucket](https://books.spartan-cybersec.com/cpna/introduccion-a-s3/backdorizando-un-bucket-s3-utilizando-la-politica-del-bucket.md)
- [Exfiltracion de datos utilizando la replicacion en S3](https://books.spartan-cybersec.com/cpna/introduccion-a-s3/exfiltracion-de-datos-utilizando-la-replicacion-en-s3.md)
- [¿Que es Elastic Compute Cloud o EC2?](https://books.spartan-cybersec.com/cpna/introduccion-a-ec2/que-es-elastic-compute-cloud-o-ec2.md)
- [Networking en EC2](https://books.spartan-cybersec.com/cpna/introduccion-a-ec2/networking-en-ec2.md)
- [Fundamentos ofensivos para el servicio de IMDSv1](https://books.spartan-cybersec.com/cpna/introduccion-a-ec2/fundamentos-ofensivos-para-el-servicio-de-imdsv1.md)
- [¿Porque utilizar IMDSv2?](https://books.spartan-cybersec.com/cpna/introduccion-a-ec2/fundamentos-ofensivos-para-el-servicio-de-imdsv1/porque-utilizar-imdsv2.md)
- [Ejecuccion de comandos en EC2 utilizando User Data](https://books.spartan-cybersec.com/cpna/introduccion-a-ec2/ejecuccion-de-comandos-en-ec2-utilizando-user-data.md)
- [Recuperacion de la contraseña de un EC2](https://books.spartan-cybersec.com/cpna/introduccion-a-ec2/recuperacion-de-la-contrasena-de-un-ec2.md)
- [AWS Security Token](https://books.spartan-cybersec.com/cpna/introduccion-a-ec2/aws-security-token.md)
- [¿Que es Virtual Private Cloud o VPC?](https://books.spartan-cybersec.com/cpna/introduccion-a-vpc/que-es-virtual-private-cloud-o-vpc.md)
- [Grupos de seguridad VS lista de control de acceso](https://books.spartan-cybersec.com/cpna/introduccion-a-vpc/grupos-de-seguridad-vs-lista-de-control-de-acceso.md)
- [Pivoting en AWS VPC](https://books.spartan-cybersec.com/cpna/introduccion-a-vpc/pivoting-en-aws-vpc.md)
- [Realizando Pivoting sobre un EC2](https://books.spartan-cybersec.com/cpna/introduccion-a-vpc/realizando-pivoting-sobre-un-ec2.md)
- [Enumeracion manual con AWSCLI](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-ec2/enumeracion-manual-con-awscli.md)
- [Vectores de escalacion de privilegios](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-ec2/vectores-de-escalacion-de-privilegios.md)
- [CreateEC2WithExistingIP](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-ec2/vectores-de-escalacion-de-privilegios/createec2withexistingip.md)
- [PassExistingRoleToNewGlueDevEndpoint](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-ec2/vectores-de-escalacion-de-privilegios/passexistingroletonewgluedevendpoint.md)
- [Resolviendo iam\_privesc\_by\_rollback de CloudGoat](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-ec2/vectores-de-escalacion-de-privilegios/resolviendo-iam_privesc_by_rollback-de-cloudgoat.md)
- [Abusando del servicio de metadatos IMDSv1 por medio de un SSRF](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-ec2/abusando-del-servicio-de-metadatos-imdsv1-por-medio-de-un-ssrf.md)
- [Caso de estudio - Capital One](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-ec2/caso-de-estudio-capital-one.md)
- [Despliegue de Kali Linux en AWS para operaciones ofensivas](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-ec2/despliegue-de-kali-linux-en-aws-para-operaciones-ofensivas.md)
- [Bypass Rate Limit con IP Rotator de BurpSuite](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-ec2/despliegue-de-kali-linux-en-aws-para-operaciones-ofensivas/bypass-rate-limit-con-ip-rotator-de-burpsuite.md)
- [Exfiltracion de datos utilizando un Snapshots de EBS](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-ec2/exfiltracion-de-datos-utilizando-un-snapshots-de-ebs.md)
- [Exfiltracion de datos utilizando un Snapshots de una AMI](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-ec2/exfiltracion-de-datos-utilizando-un-snapshots-de-una-ami.md)
- [¿Que es un Lambda?](https://books.spartan-cybersec.com/cpna/introduccion-a-lambda/que-es-un-lambda.md)
- [Desarrollo Serverless con Lambda](https://books.spartan-cybersec.com/cpna/introduccion-a-lambda/desarrollo-serverless-con-lambda.md)
- [Arquitectura Monolítica vs Arquitectura Serverless](https://books.spartan-cybersec.com/cpna/introduccion-a-lambda/arquitectura-monolitica-vs-arquitectura-serverless.md)
- [Damn Vulnerable Serverless Application](https://books.spartan-cybersec.com/cpna/introduccion-a-lambda/damn-vulnerable-serverless-application.md)
- [Enumeracion manual con AWSCLI](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-lambda/enumeracion-manual-con-awscli.md)
- [Remote Code Execution en Lambda](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-lambda/remote-code-execution-en-lambda.md)
- [Vectores de escalacion de privilegios](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-lambda/vectores-de-escalacion-de-privilegios.md)
- [PassExistingRoleToNewLambdaThenInvoke](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-lambda/vectores-de-escalacion-de-privilegios/passexistingroletonewlambdatheninvoke.md)
- [PassRoleToNewLambdaThenTriggerWithNewDynamo](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-lambda/vectores-de-escalacion-de-privilegios/passroletonewlambdathentriggerwithnewdynamo.md)
- [EditExistingLambdaFunctionWithRole](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-lambda/vectores-de-escalacion-de-privilegios/editexistinglambdafunctionwithrole.md)
- [Resolviendo lambda\_privesc de CloudGoat](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-lambda/resolviendo-lambda_privesc-de-cloudgoat.md)
- [Secuestro de Credenciales IAM y Datos de Eventos en AWS Lambda](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-lambda/secuestro-de-credenciales-iam-y-datos-de-eventos-en-aws-lambda.md)
- [¿Que es API Gateway?](https://books.spartan-cybersec.com/cpna/introduccion-a-api-gateway/que-es-api-gateway.md)
- [Vulnerabilidades Potenciales en API Gateway](https://books.spartan-cybersec.com/cpna/introduccion-a-api-gateway/vulnerabilidades-potenciales-en-api-gateway.md)
- [Enumeracion manual con AWSCLI](https://books.spartan-cybersec.com/cpna/introduccion-a-api-gateway/enumeracion-manual-con-awscli.md)
- [Divulgacion de informacion sensible por medio de un mal manejo de errores](https://books.spartan-cybersec.com/cpna/introduccion-a-api-gateway/divulgacion-de-informacion-sensible-por-medio-de-un-mal-manejo-de-errores.md)
- [¿Que es Cognito?](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/que-es-cognito.md)
- [Enumeracion manual con AWSCLI](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/enumeracion-manual-con-awscli.md)
- [Fundamentos de Lambda Autorizadora](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/fundamentos-de-lambda-autorizadora.md)
- [Falta de Verificación de la Firma del JWT](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/falta-de-verificacion-de-la-firma-del-jwt.md)
- [Vulnerable Cognito](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/vulnerable-cognito.md)
- [Tecnicas y tacticas ofensivas en Cognito](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito.md)
- [cognito-identity:SetIdentityPoolRoles + iam:PassRole](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito/cognito-identity-setidentitypoolroles-+-iam-passrole.md)
- [cognito-identity:update-identity-pool](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito/cognito-identity-update-identity-pool.md)
- [cognito-idp:AdminAddUserToGroup](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito/cognito-idp-adminaddusertogroup.md)
- [\[cognito-idp:CreateGroup + cognito-idp:UpdateGroup\], iam:PassRole](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito/cognito-idp-creategroup-+-cognito-idp-updategroup-iam-passrole.md)
- [cognito-idp:AdminConfirmSignUp](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito/cognito-idp-adminconfirmsignup.md)
- [cognito-idp:AdminCreateUser](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito/cognito-idp-admincreateuser.md)
- [cognito-idp:AdminEnableUser](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito/cognito-idp-adminenableuser.md)
- [cognito-idp:AdminSetUserPassword](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito/cognito-idp-adminsetuserpassword.md)
- [AdminSetUserSettings | SetUserMFAPreference | SetUserPoolMfaConfig | UpdateUserPool](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito/adminsetusersettings-or-setusermfapreference-or-setuserpoolmfaconfig-or-updateuserpool.md)
- [cognito-idp:AdminUpdateUserAttributes](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito/cognito-idp-adminupdateuserattributes.md)
- [cognito-idp:CreateUserPoolClient | cognito-idp:UpdateUserPoolClient](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito/cognito-idp-createuserpoolclient-or-cognito-idp-updateuserpoolclient.md)
- [cognito-idp:CreateUserImportJob | cognito-idp:StartUserImportJob](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito/cognito-idp-createuserimportjob-or-cognito-idp-startuserimportjob.md)
- [cognito-idp:CreateIdentityProvider | cognito-idp:UpdateIdentityProvider](https://books.spartan-cybersec.com/cpna/introduccion-a-cognito/tecnicas-y-tacticas-ofensivas-en-cognito/cognito-idp-createidentityprovider-or-cognito-idp-updateidentityprovider.md)
- [¿Que es Lightsail?](https://books.spartan-cybersec.com/cpna/introduccion-a-lightsail/que-es-lightsail.md)
- [Vulnerabilidades Potenciales en Lightsail](https://books.spartan-cybersec.com/cpna/introduccion-a-lightsail/vulnerabilidades-potenciales-en-lightsail.md)
- [Wordpress Vulnerable](https://books.spartan-cybersec.com/cpna/introduccion-a-lightsail/wordpress-vulnerable.md)
- [¿Que es DynamoDB?](https://books.spartan-cybersec.com/cpna/introduccion-a-dynamodb/que-es-dynamodb.md)
- [Enumeracion manual con AWSCLI](https://books.spartan-cybersec.com/cpna/introduccion-a-dynamodb/enumeracion-manual-con-awscli.md)
- [Vulnerabilidades Potenciales en DynamoDB](https://books.spartan-cybersec.com/cpna/introduccion-a-dynamodb/vulnerabilidades-potenciales-en-dynamodb.md)
- [¿Que es RDS?](https://books.spartan-cybersec.com/cpna/introduccion-a-rds/que-es-rds.md)
- [Vulnerabilidades Potenciales en RDS](https://books.spartan-cybersec.com/cpna/introduccion-a-rds/vulnerabilidades-potenciales-en-rds.md)
- [Cambiando contraseña para un RDS](https://books.spartan-cybersec.com/cpna/introduccion-a-rds/cambiando-contrasena-para-un-rds.md)
- [Remote Code Execution sobre un EC2 para comprometer una BD alojada en RDS](https://books.spartan-cybersec.com/cpna/introduccion-a-rds/remote-code-execution-sobre-un-ec2-para-comprometer-una-bd-alojada-en-rds.md)
- [Exfiltracion de un RDS por medio de un snapshot](https://books.spartan-cybersec.com/cpna/introduccion-a-rds/exfiltracion-de-un-rds-por-medio-de-un-snapshot.md)
- [Introducción a los Contenedores y la Orquestación](https://books.spartan-cybersec.com/cpna/introduccion-a-ecs-eks-ecr/introduccion-a-los-contenedores-y-la-orquestacion.md)
- [¿Que es ECS, EKS, ECR?](https://books.spartan-cybersec.com/cpna/introduccion-a-ecs-eks-ecr/que-es-ecs-eks-ecr.md)
- [Vulnerabilidades Potenciales en ECS](https://books.spartan-cybersec.com/cpna/introduccion-a-ecs-eks-ecr/vulnerabilidades-potenciales-en-ecs.md)
- [Cluster Hijacking](https://books.spartan-cybersec.com/cpna/introduccion-a-ecs-eks-ecr/cluster-hijacking.md)
- [Cloud Container Attack Tool - (CCAT)](https://books.spartan-cybersec.com/cpna/introduccion-a-ecs-eks-ecr/cloud-container-attack-tool-ccat.md)
- [Enumeracion manual con AWSCLI](https://books.spartan-cybersec.com/cpna/introduccion-a-ecs-eks-ecr/enumeracion-manual-con-awscli.md)
- [AWS SSO Phishing](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-arquitectos-de-aws/aws-sso-phishing.md)
- [Phishing sobre Login de AWS con Bypass de MFA](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-arquitectos-de-aws/phishing-sobre-login-de-aws-con-bypass-de-mfa.md)
- [Gaining AWS Console Access via API Keys - aws\_consoler](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-arquitectos-de-aws/gaining-aws-console-access-via-api-keys-aws_consoler.md)
- [Leaked Credentials](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-arquitectos-de-aws/leaked-credentials.md)
- [Using Modern Malware](https://books.spartan-cybersec.com/cpna/tecnicas-ofensivas-contra-arquitectos-de-aws/using-modern-malware.md)
- [¿Que es  AWS Secrets Manager?](https://books.spartan-cybersec.com/cpna/introduccion-a-secrets-manager/que-es-aws-secrets-manager.md)
- [Enumeración manual de aws secrets manager](https://books.spartan-cybersec.com/cpna/introduccion-a-secrets-manager/enumeracion-manual-de-aws-secrets-manager.md)
- [Fundamentos del movimiento lateral en Cloud](https://books.spartan-cybersec.com/cpna/movimiento-lateral-cloud-to-cloud/fundamentos-del-movimiento-lateral-en-cloud.md)
- [Técnica 1: Creación de Snapshot de EBS](https://books.spartan-cybersec.com/cpna/movimiento-lateral-cloud-to-cloud/tecnica-1-creacion-de-snapshot-de-ebs.md): Investigacion y creditos a https://unit42.paloaltonetworks.com/
- [Técnica 2: EC2 Instance Connect](https://books.spartan-cybersec.com/cpna/movimiento-lateral-cloud-to-cloud/tecnica-2-ec2-instance-connect.md): Investigacion y creditos a https://unit42.paloaltonetworks.com/
- [Técnica 3: Serial Console Access](https://books.spartan-cybersec.com/cpna/movimiento-lateral-cloud-to-cloud/tecnica-3-serial-console-access.md): Investigacion y creditos a https://unit42.paloaltonetworks.com/
- [Technique 4: AWS: Systems Manager](https://books.spartan-cybersec.com/cpna/movimiento-lateral-cloud-to-cloud/technique-4-aws-systems-manager.md): Investigacion y creditos a https://unit42.paloaltonetworks.com/
- [Las cuentas de AWS como límite de seguridad](https://books.spartan-cybersec.com/cpna/pivoting-en-aws-organizations/las-cuentas-de-aws-como-limite-de-seguridad.md): Investigacion inspirada en https://www.netspi.com/
- [AWS Organizations](https://books.spartan-cybersec.com/cpna/pivoting-en-aws-organizations/aws-organizations.md): Investigacion inspirada en https://www.netspi.com/
- [Abusando de las relaciones de confianza al crear un cuenta (OrganizationAccountAccessRole)](https://books.spartan-cybersec.com/cpna/pivoting-en-aws-organizations/abusando-de-las-relaciones-de-confianza-al-crear-un-cuenta-organizationaccountaccessrole.md): Investigacion inspirada en https://www.netspi.com/
- [Trusted Access and Delegated Administration](https://books.spartan-cybersec.com/cpna/pivoting-en-aws-organizations/trusted-access-and-delegated-administration.md): Investigacion inspirada en https://www.netspi.com/
- [Realizando un pivoting habilitando IAM Access Analyzer por medio de Trusted Access](https://books.spartan-cybersec.com/cpna/pivoting-en-aws-organizations/realizando-un-pivoting-habilitando-iam-access-analyzer-por-medio-de-trusted-access.md)
- [Laboratorios desplegables para practicar hacking en AWS](https://books.spartan-cybersec.com/cpna/material-extra/laboratorios-desplegables-para-practicar-hacking-en-aws.md)
- [Explotacion de CVEs en la nube - (Log4Shell)](https://books.spartan-cybersec.com/cpna/material-extra/explotacion-de-cves-en-la-nube-log4shell.md)
- [PassExistingRoleToCloudFormation](https://books.spartan-cybersec.com/cpna/material-extra/passexistingroletocloudformation.md)
- [PassExistingRoleToNewDataPipeline](https://books.spartan-cybersec.com/cpna/material-extra/passexistingroletonewdatapipeline.md)
- [Utilizando Cartography](https://books.spartan-cybersec.com/cpna/material-extra/utilizando-cartography.md)
- [Utilizando PACU](https://books.spartan-cybersec.com/cpna/material-extra/utilizando-pacu.md)
- [Introducción a Blue Team en AWS](https://books.spartan-cybersec.com/cpna/fundamentos-del-blue-team-en-aws/introduccion-a-blue-team-en-aws.md)
- [Amazon Cloudtrail](https://books.spartan-cybersec.com/cpna/fundamentos-del-blue-team-en-aws/amazon-cloudtrail.md)
- [Apagando esta defensa](https://books.spartan-cybersec.com/cpna/fundamentos-del-blue-team-en-aws/amazon-cloudtrail/apagando-esta-defensa.md)
- [Amazon CloudWatch](https://books.spartan-cybersec.com/cpna/fundamentos-del-blue-team-en-aws/amazon-cloudwatch.md)
- [Amazon GuardDuty](https://books.spartan-cybersec.com/cpna/fundamentos-del-blue-team-en-aws/amazon-guardduty.md)
- [Apagando esta defensa](https://books.spartan-cybersec.com/cpna/fundamentos-del-blue-team-en-aws/amazon-guardduty/apagando-esta-defensa.md)
- [Amazon Detective](https://books.spartan-cybersec.com/cpna/fundamentos-del-blue-team-en-aws/amazon-detective.md)
- [Amazon Security Hub](https://books.spartan-cybersec.com/cpna/fundamentos-del-blue-team-en-aws/amazon-security-hub.md)
- [¿Como se habilita?](https://books.spartan-cybersec.com/cpna/fundamentos-del-blue-team-en-aws/amazon-security-hub/como-se-habilita.md)
- [Amazon Inspector](https://books.spartan-cybersec.com/cpna/fundamentos-del-blue-team-en-aws/amazon-inspector.md)
- [Amazon WAF](https://books.spartan-cybersec.com/cpna/fundamentos-del-blue-team-en-aws/amazon-waf.md)
- [🛡️ ¡Muchísimas Gracias por Participar! 🛡️](https://books.spartan-cybersec.com/cpna/muchas-gracias/muchisimas-gracias-por-participar.md)
- [Importante](https://books.spartan-cybersec.com/cpna/muchas-gracias/importante.md)