Earn the Certified AWS Penetration Tester (CAPT) certification to validate your expertise in AWS exploitation, red teaming tactics, and cloud security bypass techniques. This certification proves your ability to conduct real-world attack simulations against AWS environments, making you a valuable asset in cloud security. Gain hands-on experience through labs and instructor-led training, preparing for roles like Red Teamer (Cloud) or Cloud Penetration Tester. Participants receive a CAPT certificate upon completing the bootcamp and passing the practical exam.

Prerequisites

• Basic Cloud Concepts
• Basic Pentesting & Security Concepts
• Basic Command Line & PowerShell Skills

Bootcamp Agenda

Session 1: AWS Foundations & IAM Exploitation

• Overview of AWS global architecture, accounts, Organizations, and regions
• Shared responsibility model and attacker mindset in cloud environments
• IAM fundamentals: users, groups, roles, policies, and trust relationships
• Exploiting overly permissive policies and role misconfigurations
• Privilege escalation paths: AssumeRole abuse, inline/managed policy flaws, and cross-account access

Session 2: Exploiting Compute & Storage Services (EC2 & S3)

• EC2 attack surface: metadata service (IMDSv1/v2), SSRF vectors, temporary credential theft
• Snapshot, AMI, and key pair exposure for data access and persistence
• Stealing EC2 instance credentials
• S3 exploitation: bucket policies, ACL misconfigurations, public access patterns
• Presigned URL abuse, enumeration of objects, and cross-region data exfiltration
• Exfiltrating sensitive S3 data

Session 3: Serverless & Federation Exploitation 

• Lambda attack surface: environment variables, deployment package secrets, over-privileged execution roles
• API Gateway misconfigurations: authorizer bypasses, improper request validation, mapping template flaws
• Event-driven privilege escalation via SQS, SNS, and EventBridge
• Cognito misconfigurations: improper app client settings, token manipulation, identity pool escalation
• Bypassing Cognito authentication flows

Session 4: KMS/Secrets, IaC Abuse & Detection Evasion

• Key Management Service (KMS) policy flaws and grant abuses
• Secrets Manager and Parameter Store exploitation for lateral movement
• Infrastructure-as-Code backdoors: CloudFormation, Terraform, and CodePipeline attacks
• Detection gaps: bypassing GuardDuty, tampering with CloudTrail, and creating stealthy persistence
• Red-team tradecraft: chaining misconfigurations into full kill-chain exploitation
• Report Writing

Bootcamp Schedule (November 2025 Batch)

• Live, Instructor-led Training via Zoom
• Private Discord Community for Discussions and Q&A
• Recorded Sessions Available after each Class

Live Session Dates

Who Should Join This Bootcamp?

• Penetration testers expanding into cloud engagements
• Security engineers responsible for securing AWS workloads
• Cybersecurity professionals needing hands-on cloud red teaming experience
• Developers and Architects seeking to harden AWS workloads by understanding attacker tradecraft

Purchase Includes

• Course materials
• Certificate of Completion after the bootcamp
• One CAPT Exam Attempt within 30 days
• 30-Day Lab Access - contact training@redfoxsec.com