From the Open Cloud Security Conference held April 8, 2025
Cloud misconfigurations are one of the biggest threats facing modern cloud infrastructure—and attackers know it.
In this talk, Sandeep Singh from @projectdiscovery dives into how open source tools like Nuclei and Subfinder can automate and scale cloud pentesting across AWS and multi-cloud environments.
You'll learn how to:
✅ Discover cloud misconfigurations before attackers do
✅ Identify overly permissive IAM roles and security gaps
✅ Automate reconnaissance and scanning workflows
✅ Apply open source methodologies to modern cloud defense
Whether you're a cloud security engineer, pentester, or just getting started with cloud security, this session offers hands-on insight into building transparent and scalable cloud security workflows with open source.
🔗 Resources mentioned:
Nuclei: https://nuclei.projectdiscovery.io
Subfinder: https://subfinder.projectdiscovery.io
ProjectDiscovery GitHub: https://github.com/projectdiscovery
Subscribe for more on open source cloud security, automation, and real-world pentesting techniques.
#cloudsecurity #awssecurity #pentesting #opensource #nuclei #subfinder #projectdiscovery #infosec