AfroHax

CTF Jeopardy Competitions : https://nhnc.ic3dt3a.org/ https://ctf2026.r3kapig.com/ https://fluidattacks.com/ctf https://ctf.itzdenkii.me/ https://broncoctf.ctfd.io/ @AfroHax

│ └── Data Exfiltration Simulation │ ├── Cloud-to-Cloud Exfil Paths │ ├── Storage Replication Abuse │ └── Business Impact Demonstration ├── Level 5: Elite Cloud Security / Architecture │ ├── Threat Emulation │ │ ├── Mapping to MITRE ATT&CK Cloud Matrix │ │ ├── Emulating Real Cloud-Native APTs │ │ └── Multi-Tenant Attack Path Design │ ├── Custom Tooling │ │ ├── Cloud-Native Exploit Tooling │ │ ├── Custom Detection Bypass Research │ │ └── Attack Path Automation │ ├── Security Architecture & Design Review │ │ ├── Zero Trust Architecture │ │ ├── Landing Zone / Org Design Review │ │ └── Secure CI/CD Design │ ├── Purple Team Operations │ │ ├── Detection Engineering Feedback │ │ ├── SIEM/CSPM Rule Testing │ │ └── Defensive Collaboration │ └── Executive-Level Reporting │ ├── Risk Translation │ ├── Cloud Cost-of-Breach Narratives │ └── Strategic Remediation Roadmaps └── Governance & Methodology Layer (Applies to All Levels) ├── Shared Responsibility Boundaries ├── Compliance Frameworks (CIS, SOC2, ISO 27001) ├── Rules of Engagement ├── Evidence Handling └── Responsible Disclosure @AfroHax

Cloud Security Capability Framework ├── Pre-Level-1a: Absolute Beginner (No IT Background) │ ├── Computer Literacy │ │ ├── What a CPU, RAM, Storage actually do │ │ ├── File systems & navigating an OS (GUI + basic CLI) │ │ └── Installing software, using a terminal │ ├── Internet Basics │ │ ├── What a server is, client-server model │ │ ├── What an IP address / domain name is │ │ └── How a webpage loads (browser → DNS → server) │ ├── Foundational Concept Building │ │ ├── What "the cloud" actually means (someone else's server) │ │ ├── Why companies use cloud providers │ │ └── Basic vocabulary: server, network, application, data │ └── Typical Resources │ ├── CompTIA ITF+ (IT Fundamentals) │ ├── "Crash Course Computer Science" (YouTube) │ └── Basic Linux command line tutorials ├── Level 1b: Foundations (Security Core) │ ├── Networking Fundamentals │ │ ├── TCP/IP, DNS, HTTP/HTTPS │ │ ├── VPC/VNet Concepts │ │ ├── Subnets, Routing, Peering │ │ └── Firewalls & Security Groups │ ├── Cloud Provider Basics │ │ ├── AWS Core Services (IAM, EC2, S3, VPC) │ │ ├── Azure Core Services (Entra ID, VMs, Blob, VNet) │ │ └── GCP Core Services (IAM, Compute, GCS, VPC) │ ├── Scripting & Automation │ │ ├── Bash & Python │ │ ├── AWS CLI / Azure CLI / gcloud │ │ └── Infrastructure as Code Basics (Terraform) │ └── Security Concepts │ ├── Shared Responsibility Model │ ├── CIA Triad in Cloud Context │ └── Common Misconfiguration Types ├── Level 2: Junior Cloud Security Analyst (Posture Basics) │ ├── Identity & Access Management │ │ ├── IAM Policies & Roles │ │ ├── Least Privilege Concepts │ │ └── MFA & Root Account Hygiene │ ├── Storage & Data Exposure │ │ ├── S3 Bucket Misconfigurations │ │ ├── Public Blob/Bucket Discovery │ │ └── Encryption at Rest Basics │ ├── Recon & Enumeration │ │ ├── Cloud Asset Discovery │ │ ├── Subdomain-to-Cloud-Service Mapping │ │ └── Open Cloud Storage Hunting │ ├── Basic Misconfig Hunting │ │ ├── Security Group Audits │ │ ├── Public Snapshot/AMI Checks │ │ └── Default Credential Checks │ └── Reporting │ ├── Writing PoCs for Misconfigs │ └── Documenting Exposure Findings ├── Level 3: Intermediate Cloud Security Analyst (Privilege & Trust Abuse) │ ├── IAM Privilege Escalation │ │ ├── Policy Chaining │ │ ├── AssumeRole Abuse (AWS) │ │ └── Managed Identity Abuse (Azure/GCP) │ ├── Cross-Account & Trust Relationships │ │ ├── Cross-Account Role Abuse │ │ ├── Federation & SSO Trust Issues │ │ └── Third-Party Access Risks │ ├── Serverless & Container Security │ │ ├── Lambda/Function Misconfig │ │ ├── Container Escape Concepts │ │ └── Kubernetes RBAC Basics │ ├── Logging & Monitoring Awareness │ │ ├── CloudTrail / Activity Logs │ │ ├── Guard Duty / Defender Concepts │ │ └── Log Tampering Risks │ └── Framework Familiarity │ ├── Prowler / ScoutSuite │ ├── Pacu (AWS exploitation) │ └── CloudSploit / Cloud Custodian ├── Level 4: Advanced Cloud Security (Adversary Simulation in Cloud) │ ├── Cloud Persistence Techniques │ │ ├── Backdoor IAM Roles │ │ ├── Lambda Persistence │ │ └── Hidden Service Principals │ ├── Detection Evasion │ │ ├── CloudTrail Evasion Theory │ │ ├── Region/Service Blind Spots │ │ └── Living-Off-the-Cloud Techniques │ ├── Multi-Cloud Attack Chains │ │ ├── Hybrid Identity Abuse (AD-to-Cloud) │ │ ├── CI/CD Pipeline Compromise │ │ └── Secrets Manager / Vault Abuse │ ├── Web & API Exploitation in Cloud Context │ │ ├── SSRF to Metadata Service (IMDS) │ │ ├── API Gateway Abuse │ │ └── Misconfigured OAuth/OIDC

​"We have a systemic problem where the richest companies in human history are relying on infrastructure maintained by people doing it as a hobby on their weekends, and then acting surprised when that infrastructure occasionally cracks under the weight of the entire world." - AI On Open Source