> For the complete documentation index, see [llms.txt](https://red.infiltr8.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://red.infiltr8.io/cloud-cicd-pentesting.md).

# Cloud & CI/CD Pentesting

- [Kubernetes](https://red.infiltr8.io/cloud-cicd-pentesting/kubernetes.md)
- [Reconnaissance](https://red.infiltr8.io/cloud-cicd-pentesting/kubernetes/reconnaissance-and-enumeration.md): Pentesting Kubernetes (K8S): Enumeration and Information Gathering from Inside and Outside the Cluster
- [Initial Access](https://red.infiltr8.io/cloud-cicd-pentesting/kubernetes/initial-access.md): Pentesting Kubernetes (K8S): Achieving Initial Access to a Kubernetes Cluster via Anonymous Access or Compromised Pods
- [Privilege Escalation](https://red.infiltr8.io/cloud-cicd-pentesting/kubernetes/privesc-and-rbac-exploitation.md): Pentesting Kubernetes (K8S): Privilege Escalation Vectors Inside a Kubernetes Cluster
- [Persistence and Lateral Movement](https://red.infiltr8.io/cloud-cicd-pentesting/kubernetes/persistence-and-lateral-movement.md): Pentesting Kubernetes (K8s): Persistence Mechanisms in Kubernetes Environments
- [Post-Exploitation](https://red.infiltr8.io/cloud-cicd-pentesting/kubernetes/data-exfiltration.md): Pentesting Kubernetes (K8s): Post-Exploitation and Looting After Full Cluster Compromise
- [CI/CD](https://red.infiltr8.io/cloud-cicd-pentesting/ci-cd.md)
- [Ansible Pentesting](https://red.infiltr8.io/cloud-cicd-pentesting/ci-cd/ansible-pentesting.md)
- [Artifactory Pentesting](https://red.infiltr8.io/cloud-cicd-pentesting/ci-cd/artifactory-pentesting.md)
- [Docker](https://red.infiltr8.io/cloud-cicd-pentesting/ci-cd/docker.md): This chapter covers the basic theory around Docker containers security and how to escape them.
- [Docker Registry](https://red.infiltr8.io/cloud-cicd-pentesting/ci-cd/registry.md)
- [HTTP API V2](https://red.infiltr8.io/cloud-cicd-pentesting/ci-cd/registry/apiv2.md)
- [GitLab](https://red.infiltr8.io/cloud-cicd-pentesting/ci-cd/gitlab.md)
- [Github](https://red.infiltr8.io/cloud-cicd-pentesting/ci-cd/github.md)
- [Gitea](https://red.infiltr8.io/cloud-cicd-pentesting/ci-cd/gitea.md)
- [Jenkins](https://red.infiltr8.io/cloud-cicd-pentesting/ci-cd/jenkins.md)
- [Terraform](https://red.infiltr8.io/cloud-cicd-pentesting/ci-cd/terraform.md)
- [Azure Pentesting](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad.md)
- [Reconnaissance](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/reconnaissance.md)
- [Tools ⚙️](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/reconnaissance/tools.md)
- [Unauthenticated Reconnaissance](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/reconnaissance/unauthenticated-reconnaissance.md)
- [Internal Reconnaissance](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/reconnaissance/internal-reconnaissance.md)
- [Movement](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement.md)
- [Credentials](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/credentials.md)
- [Password Spraying](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/credentials/password-spraying.md)
- [Token Manipulation](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/credentials/token-manipulation.md)
- [Pass-The-Cookie (PTC)](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/credentials/token-manipulation/pass-the-cookie-ptc.md)
- [Pass the Certificate (Azure)](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/credentials/token-manipulation/pass-the-certificate-azure.md)
- [Pass the PRT](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/credentials/token-manipulation/pass-the-prt.md)
- [Aazure Resources](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/aazure-resources.md)
- [Key Vault](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/aazure-resources/key-vault.md)
- [Storage Accounts](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/aazure-resources/storage-accounts.md)
- [Virtual Machines](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/aazure-resources/virtual-machines.md)
- [Automation](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/aazure-resources/automation.md)
- [Databases](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/aazure-resources/databases.md)
- [Role-Based Access](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/role-based-access.md)
- [Conditional Access](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/conditional-access.md)
- [Service Principals & Applications](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/service-principals-and-applications.md)
- [Hybrid Identity](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/hybrid-identity.md)
- [Password Hash Sync (PHS)](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/hybrid-identity/password-hash-sync-phs.md)
- [Pass-through Authentication (PTA)](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/hybrid-identity/pass-through-authentication-pta.md)
- [Active Directory Federation Services (ADFS)](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/hybrid-identity/active-directory-federation-services-adfs.md)
- [Seamless SSO](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/hybrid-identity/seamless-sso.md)
- [Cloud Kerberos Trust](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/hybrid-identity/cloud-kerberos-trust.md)
- [Cross-Tenant Access](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/movement/cross-tenant-access.md)
- [Persistence](https://red.infiltr8.io/cloud-cicd-pentesting/azure-ad/persistence.md)
- [AWS Pentesting](https://red.infiltr8.io/cloud-cicd-pentesting/aws.md)
- [Reconnaissance](https://red.infiltr8.io/cloud-cicd-pentesting/aws/reconnaissance.md)
- [Unauthenticated Enumeration](https://red.infiltr8.io/cloud-cicd-pentesting/aws/reconnaissance/unauthenticated-enumeration.md): Unauthenticated AWS Enumeration
- [Movement](https://red.infiltr8.io/cloud-cicd-pentesting/aws/movement.md)
- [AWS IAM](https://red.infiltr8.io/cloud-cicd-pentesting/aws/movement/aws-iam.md)
- [Users & Groups](https://red.infiltr8.io/cloud-cicd-pentesting/aws/movement/aws-iam/users-and-groups.md): AWS IAM Users & Groups
- [Roles & AssumeRole](https://red.infiltr8.io/cloud-cicd-pentesting/aws/movement/aws-iam/roles-and-assumerole.md): AWS IAM Roles & AssumeRole
- [Access Keys](https://red.infiltr8.io/cloud-cicd-pentesting/aws/movement/aws-iam/access-keys.md): AWS IAM Access Keys
- [Policies](https://red.infiltr8.io/cloud-cicd-pentesting/aws/movement/aws-iam/policies.md): AWS IAM Policies
- [PassRole & Service Principals](https://red.infiltr8.io/cloud-cicd-pentesting/aws/movement/aws-iam/passrole-and-service-principals.md): AWS IAM: PassRole & Service Principals
- [MFA](https://red.infiltr8.io/cloud-cicd-pentesting/aws/movement/aws-iam/mfa.md)
- [Identity Center](https://red.infiltr8.io/cloud-cicd-pentesting/aws/movement/aws-iam/identity-center.md): AWS IAM Identity Center
- [Federation (SAML & OIDC)](https://red.infiltr8.io/cloud-cicd-pentesting/aws/movement/aws-iam/federation-saml-and-oidc.md): AWS IAM Federation
- [Persistence](https://red.infiltr8.io/cloud-cicd-pentesting/aws/persistence.md)
- [GCP Pentesting](https://red.infiltr8.io/cloud-cicd-pentesting/gcp-pentesting.md)