Search for a command to run...
Series
Welcome to the "flaws challenge!" built by Scott Piper of Summit Route.
Welcome to Level 1. For this level, we are challenged to find the first sub-domain associated with flaws.cloud NB: You can click Hint 1 to view more details on how to solve the challenge. I recommend you follow the steps below before viewing the HIN...
This level is fairly similar to the first level. You will need to create an AWS account for this level if you don't already have one. NB: Don’t use a company or sensitive account. Try to create a new free tier account. You can check out my cloud se...
Welcome to Level -3. At this level, we are tasked with finding secret content in one of the S3 bucket files (“.git file"). The next level is at Level 3 link When you click on the level 3 link, you will find the list of git files as shown below on y...
Welcome to Level 5. For this level, we are given access to an EC2 instance hosting a simple HTTP proxy. The proxy allows us to access external resources through it. We are tasked with using this proxy to list the contents of the level 6 bucket level6...
First, see how to identify IPs and sub-domains associated with flaws2.cloud using nslookup Several IP addresses were identified. Now using nslookup command on the discovered IPs An AWS S3 bucket was identified: s3-website-us-east-1.amazonaws.co...
As stated in the Instruction, this level is operating within a container, resembling the setup of a website hosted on an S3 bucket along with other resources having open permissions. Just as a hint, the Elastic Container Registry (ECR) is named "leve...
