HackTricks with Carlos Polop | Podcast Ep. 106

It’s becoming more common for companies to rely on cloud platforms like AWS, SaaS tools, Okta, and Github actions on CICD pipelines. In this episode, penetration tester and creator of HackTricks Carlos Polop shares how he’s helping cloud-first organizations understand the risk of vulnerabilities, misconfigurations, and exploitation techniques such as stealing secrets and abusing trusted relationships.
His videos, demos, and training sessions are essential resources for IT security pros in cloud or hybrid organizations. Listen in as he shares his research on how cloud services are commonly misused and exploited and breaks down the latest strategies for maintaining a strong security posture.
Chapters:
00:00 Introduction and Background
01:16 Starting Hacktricks
10:45 Expanding to Cloud Hacktricks
15:37 Focus on Cloud Platforms
19:13 Building a Holistic Understanding of Cloud Architecture
20:17 The Importance of Securely Configuring Cloud Providers
21:16 Expanding the Scope of Cloud Hacking to Include Defensive Capabilities
22:03 Introduction of CloudHacktrix Training
23:07 The Idea Behind the ARTE Certification
24:28 Comprehensive Training on AWS Services
26:09 Balancing Research and Conference Speaking
30:32 Future Plans for Hacktrix and Conferences
35:15 Staying in Contact with Carlos Polo
36:25 Final Words of Wisdom
Check out all our cybersecurity podcasts: delinea.com/ev...
Follow Joe:
/ josephcarson
/ joe_carson
Follow Carlos:
/ carlos-polop-martin
book.hacktrick...
cloud.hacktric...
training.hackt...
* * *
Want to maximize your organization’s cybersecurity? Join us on LinkedIn and Twitter-we have many great resources for CISOs, BISOs and IT security teams:
/ delinea
/ delineainc
See what else we have coming down the pipeline-subscribe to our RUclips Channel:
www.youtube.co...
Subscribe to never miss an episode!
APPLE: podcasts.apple...
SPOTIFY: open.spotify.c...
#cybersecuritypodcast #hacktricks