CloudGoat

No entries match these filters. Clear filters

1. v2.5.0 Mar 20, 2026 · release notes

   CloudGoat v2.5.0 adds a new IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. enumeration basics training scenario.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.5.0 https://github.com/RhinoSecurityLabs/cloudgoat.git
   # already have the repo? check out this version:
   $ git checkout v2.5.0

   • New iam_enum_basics scenario for practicing foundational AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege. enumeration techniques.

   1 detail in Everything

2. v2.4.0 Feb 12, 2026 · release notes

   CloudGoat v2.4.0 adds six new attack scenarios covering S3 versioning, Bedrock agent hijacking, ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources., and more.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.4.0 https://github.com/RhinoSecurityLabs/cloudgoat.git
   # already have the repo? check out this version:
   $ git checkout v2.4.0

   • New scenario s3_version_rollback_via_cfn: trains practitioners on S3 version rollback attacks via CloudFormationCloudFormationAn AWS service that lets you describe and provision cloud infrastructure as declarative YAML or JSON templates, so a cyber tool can reproducibly spin up or tear down its entire AWS environment with a single API call..
   • New scenario agentcore_identity_confusion: covers identity confusion attacks targeting AWS AgentCore.
   • New scenario bedrock_agent_hijacking: simulates hijacking of Amazon Bedrock agents.
   • New scenario ecs_privesc_evade_protection: teaches ECS privilege escalation while evading protections.
   • New scenario SNS_Secrets upgraded to use dynamic API key generation.

   +4 more show less

   • New scenario data_secrets: focuses on secrets discovery in data services.
   • New scenario Static: adds a static-credential abuse training scenario.
   • Dynamic Ubuntu AMI lookup replaces hardcoded AMI in the cloud_breach_s3 scenario, improving portability across regions.
   • Default EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. instance type updated to t3.micro for AWS Free Tier compatibility, with additional free-tier instance type validations.

   9 details in Everything

3. v2.3.1 Sep 18, 2025 · release notes

   CloudGoat v2.3.1 adds a new AWS federated console takeover attack scenario.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.3.1 https://github.com/RhinoSecurityLabs/cloudgoat.git
   # already have the repo? check out this version:
   $ git checkout v2.3.1

   • New scenario federated_console_takeover teaches attackers how to abuse federated identity to take over an AWS console session.

   1 detail in Everything

4. v2.3.0 Jun 5, 2025 · release notes

   CloudGoat v2.3.0 adds a new AWS attack scenario focused on VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. peering over-exposure.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.3.0 https://github.com/RhinoSecurityLabs/cloudgoat.git
   # already have the repo? check out this version:
   $ git checkout v2.3.0

   • Adds new vpc_peering_overexposed AWS scenario for practicing attacks against misconfigured VPC peering relationships.

   1 detail in Everything

5. v2.2.0 Mar 21, 2025 · release notes

   CloudGoat v2.2.0 adds Azure support and a new Azure Data Factory secrets attack scenario.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.2.0 https://github.com/RhinoSecurityLabs/cloudgoat.git
   # already have the repo? check out this version:
   $ git checkout v2.2.0

   • Adds Azure cloud platform support, expanding CloudGoat beyond AWS.
   • New datafactory_secrets scenario teaches attackers how to extract secrets via Azure Data Factory.

   2 details in Everything

6. v2.1.0 Mar 20, 2025 · release notes

   CloudGoat v2.1.0 adds a new Beanstalk Secrets attack scenario for AWS security training.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.1.0 https://github.com/RhinoSecurityLabs/cloudgoat.git
   # already have the repo? check out this version:
   $ git checkout v2.1.0

   • Adds new Beanstalk Secrets scenario for practicing secret discovery and exploitation via AWS Elastic Beanstalk environments.

   1 detail in Everything

7. v2.0.1 Mar 19, 2025 · release notes

   CloudGoat v2.0.1 adds six new attack scenarios including CI/CD, ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. takeover, detection evasion, Lambda SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does., vulnerable Cognito, and SNSSNSAmazon Simple Notification Service, a managed pub/sub messaging service from AWS that lets tools fan out alerts or events to multiple subscribers — queues, email, HTTP endpoints, or Lambda functions — without managing broker infrastructure. secrets.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.0.1 https://github.com/RhinoSecurityLabs/cloudgoat.git
   # already have the repo? check out this version:
   $ git checkout v2.0.1

   • Adds lambda_privesc scenario covering Lambda-based privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. paths.
   • Adds ecs_efs_attack scenario simulating an ECS-to-EFS attack chain.
   • Adds ecs_takeover scenario for practicing ECS service takeover techniques.
   • Adds first-version CI/CD attack scenario targeting pipeline misconfigurations.
   • Adds lambda_sql_injection scenario for practicing SQL injection via Lambda.

   +10 more show less

   • Adds detection_evasion scenario for practicing CloudTrailCloudTrailAWS service that records API calls and account activity across an AWS environment, giving cyber tools an audit log to detect anomalous or malicious actions./GuardDuty evasion techniques.
   • Adds vulnerable_cognito scenario covering Cognito misconfiguration attack pathsattack pathsA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately..
   • Adds iam_privesc_by_key_rotation scenario for IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. privilege escalation via key rotation.
   • Adds sns_secrets scenario for discovering secrets exposed through SNS.
   • Adds scenario template and contribution guide to standardize community-created scenarios.
   • Adds IP address whitelisting to sqs_flag_shop and glue_privesc scenarios.
   • Adds Python 3 support for the CloudGoat core tooling.
   • Adds Docker support for running CloudGoat in a containerized environment.
   • Adds Terraform v0.14+ compatibility.
   • Adds GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure.-based automated testing for scenarios.

   15 details in Everything