Search for a command to run...
Articles tagged with #aws-s3
Lab Objective You will act as an attacker in the following ways to generate log data, which will help build your detection and automation: Perform discovery of S3 resources - ATT&CK Technique T1619 (Cloud Storage Object Discovery) Download an inte...
Lab Scenario In this lab, you will take on the role of a developer tasked with creating a web application that allows users to upload and store files securely using Amazon S3. As part of the project, you will set up a vulnerable S3 bucket to serve as...
Introduction The Amazon S3 Object Lock feature provides a valuable solution for preventing accidental deletion or modification of S3 objects. By enabling either governance mode or compliance mode, cloud security engineers can ensure the retention of ...
Welcome to Level 4. We have been assigned the task of accessing the web page running on an EC2 at 4d0cf09b9b2d761a7d87be99d17507bce8b86f3b.flaws.cloud for this level. 💡 💡 Recall at the end of Level -3, we were able to view the secret access key cr...
Welcome to Level -3. At this level, we are tasked with finding secret content in one of the S3 bucket files (“.git file"). The next level is at Level 3 link When you click on the level 3 link, you will find the list of git files as shown below on y...
This level is fairly similar to the first level. You will need to create an AWS account for this level if you don't already have one. NB: Don’t use a company or sensitive account. Try to create a new free tier account. You can check out my cloud se...
