Rhino Security Labs

Strategic & Technical Blog

Exploring the Power of Phished Persistent Cookies in AWS

Spencer Gietzen
July 16, 2019

Before diving into this blog post, you should consider reviewing our recent post on phishing users with MFA on AWS. The research discussed in this post was discovered during an AWS phishing engagement that Rhino was performing on a client,…

CloudGoat Official Walkthrough Series: “rce_web_app”

Phishing Users with MFA on AWS

CloudGoat 2: The New & Improved “Vulnerable by Design”
AWS Deployment Tool

Jeffrey Anderson
June 23, 2019

Rhino Security Labs is happy to announce the release of CloudGoat 2, the next generation of our “vulnerable by design” AWS deployment tool.
Penetration testing in AWS is still very new. There is an absence of tools to aid in learning…