// the take
This is a link list of AWS, Azure, and GCP attack techniques and tools, pulled mostly from Rhino Security Labs and Kloudle blog posts, aimed at red teamers or cloud pentesters looking for a jumping-off point into specific privilege escalation, SSRF, and misconfiguration research.
Decent breadth across three providers in one place, covering IAM privesc, credential theft from containers/metadata, MFA bypass, and phishing in a single scroll. Links go straight to primary sources (Rhino Security Labs, NetSPI, CyberArk, Bishop Fox) instead of paraphrasing them, so the technical depth of each writeup is preserved. It also points to hands-on practice ranges (CloudGoat, AzureGoat, IAM Vulnerable) alongside the theory, not just blog posts.
There is zero original content - it's a bookmark dump with no commentary on which techniques are still exploitable versus patched, and some linked posts date back to 2019-2021 with no indication of current relevance. Organization is just provider headings with no categorization by attack type, and there's outright duplication (the GKE Kubelet TLS Bootstrap link appears under both AWS and Azure). The whole thing is a single dependency on external blogs staying online; if Rhino Security Labs or Kloudle restructure their sites, a large fraction of this list breaks with no archive or mirror.
We read the README, the directory tree and a key source file in October 2026. Nobody pays to be listed. How we judge →