Solving Assumptions of Life: Winja CTF | Nullcon Goa 2022

Summary The challenge started with the web page accepting cmd parameter with only env command input. The output of the environment included AWS_ACCOUNT_ID and AWS_ROLE. After obtaining the credentials with assume-role, listing the available S3 bucket...