Target // Cloud estate
Coming soonCloud red teamレッドチーム
Break it. Map it. Secure it.
Field notes from assume-breach engagements, sorted into series by the ground they cover. Pick a target and start at part one.
Devanshu Nagpal
Red Team Engineer
Series
シリーズ 8 targets
Coming soonAWS
エーダブリューエスIAM paths, role chaining and the quiet ways an account gets walked.
See what is planned
Coming soonAzure
アジュールEntra ID, service principals and subscription-level pivots.
See what is planned
Coming soonGCP
ジーシーピーProjects, service accounts and the metadata server.
See what is planned
Coming soonKubernetes
クバネティスFrom a pod to the cluster: RBAC, tokens and the node boundary.
See what is planned
Coming soonCI/CD
シーアイRunners, pipelines and the secrets they carry.
See what is planned
Coming soonActive Directory
エーディーClassic domain attack paths, written for a hybrid world.
See what is planned
Coming soonAI Security
エーアイModels, guardrails and the systems wrapped around them.
See what is planned
Coming soonAgents and MCP
エージェントTool access, MCP servers and what an agent is trusted to do.
See what is plannedLatest entries
All blog and notesComing soon
The first write-ups are in progress. Each series already has its roadmap, so pick one to see what is planned.
See the roadmap