PPPiyush Pradhaninmediocre314.hashnode.dev·Jun 8, 2022 · 3 min readThe Defender’s path in FLAWS2Okay, so FLAWS2 Defender path isn’t like a challenge, more like a walkthrough. Just has a set of instructions that explains how security works in AWS and what exactly was compromised. We’re given a set of credentials for “security” and the first thin...00
PPPiyush Pradhaninmediocre314.hashnode.dev·Jun 5, 2022 · 4 min readGoing down the attacker path — FLAWS2To be honest, I wasn’t sure how to approach this one, I checked my notes from flaws.cloud challenge (the first version)I tried looking at an incorrect submission response. maybe this is a hint after all, this follows the format for s3 bucket URL. Bu...00
PPPiyush Pradhaninmediocre314.hashnode.dev·Apr 16, 2022 · 7 min readCloud security with flaws.cloudIn the past week, I’ve been spending my time playing around with cloud services, deploying random stuff just to try and figure out how it’s being used. I also wanted to have a vulnerable environment to try and extract something that isn’t usually mad...00