Search for a command to run...
Articles tagged with #flawscloud
This project demonstrates the deployment of the ELK Stack on an AWS EC2 instance and the ingestion of Flaws.cloud CloudTrail logs into the ELK Stack for threat detection. 💡 Side Note: When you click on the link in each step, you will be redirected...
For Level 3, the container’s webserver can be accessed with http://container.target.flaws2.cloud/proxy/http://flaws.cloud or http://container.target.flaws2.cloud/proxy/http://neverssl.com NOTE Credentials Location: EC2 instances store their IAM rol...
As stated in the Instruction, this level is operating within a container, resembling the setup of a website hosted on an S3 bucket along with other resources having open permissions. Just as a hint, the Elastic Container Registry (ECR) is named "leve...
First, see how to identify IPs and sub-domains associated with flaws2.cloud using nslookup Several IP addresses were identified. Now using nslookup command on the discovered IPs An AWS S3 bucket was identified: s3-website-us-east-1.amazonaws.co...
🚀 Sign up for the challenge Here by Cyber-defender for Free AIM This lab aims to analyze the CloudTrail logs for AWS security incidents related to the IAM User "Security”. Disclaimer Keep in mind that the challenge questions are not directly stated ...
In this final challenge, we are provided with a user access key that has the Security Audit policy attached to it. We are tasked with exploring the capabilities of this access key and uncovering any additional information or resources within the AWS ...
