Everything ~ Cloud Security
Series

Flaws.Cloud

Welcome to the "flaws challenge!" built by Scott Piper of Summit Route.

Articles in this series

Level 1:- Enumerating Flaws.cloud Domain (AWS)

Jun 17, 20236 min read

Welcome to Level 1. For this level, we are challenged to find the first sub-domain associated with flaws.cloud NB: You can click Hint 1 to view more...

Level 1:- Enumerating Flaws.cloud Domain (AWS)

Level - 2: Insecure S3 Buckets

Jun 19, 20234 min read

This level is fairly similar to the first level. You will need to create an AWS account for this level if you don't already have one. NB: Don’t use a...

Level - 2: Insecure S3 Buckets

Level -3: S3 Leaked Access Key Secret

Jun 19, 20236 min read

Welcome to Level -3. At this level, we are tasked with finding secret content in one of the S3 bucket files (“.git file"). The next level is at Level...

Level -3: S3 Leaked Access Key Secret

Level - 5: Exploiting Exposed Meta-Data

Jun 20, 20235 min read

Welcome to Level 5. For this level, we are given access to an EC2 instance hosting a simple HTTP proxy. The proxy allows us to access external...

Level - 5: Exploiting Exposed Meta-Data

Level-1: Input validation leading to compromises

Aug 11, 20234 min read

First, see how to identify IPs and sub-domains associated with flaws2.cloud using nslookup Several IP addresses were identified. Now using nslookup...

Level-1: Input validation leading to compromises

Level 2 - Containers Environmental Variables

Aug 11, 20233 min read

As stated in the Instruction, this level is operating within a container, resembling the setup of a website hosted on an S3 bucket along with other...

Level 2 - Containers Environmental Variables