2 posts tagged with "Network"

Short answer: AWS permits customer security testing of eight service categories — including EC2, RDS, Lambda, API Gateway and CloudFront — without prior approval, on resources you own. Denial of service, and anything touching another tenant or AWS's own infrastructure, remains forbidden and requires a separate process. Your customer's permission is still mandatory: AWS's policy is not authorisation to test somebody else's account.

Short answer: start with nmap -sn to find live hosts, then nmap -sS -p- --min-rate 1000 to find open ports, then nmap -sV -sC -p <open ports> to identify what is running. Everything else is refinement. Only scan systems you own or have written permission to test.