BSidesSF 2026 - CloudShell Hide-n-Seek: enjoying the sweet persistent... (Jenko Hwong, Chris Ryan)

This talk explores the concept of CloudShell persistence in terms of compute, data, and access, drawing insights from a Cloud Village Capture The Flag event at DC33. The speakers, Jenko Hwong and Chris Ryan, address challenges such as overcoming console, non-API, and API barriers, automating non-API services, and dealing with IAM obfuscation. They also discuss logging and monitoring techniques, user lockout issues, strategies for handling file and container resets, and the presence of backdoors.