Sep 13, 2025 · 8 min read · 💡 Part of the Intro to AWS Pentesting course by HackSmater. In this scenario, we explored Cloudgoat’s SNS Secrets lab, which demonstrates how overly permissive SNS subscriptions and API keys can be abused. We started with a low-privilege IAM user ...
Join discussion
Nov 5, 2024 · 4 min read · Introduction AWS Identity and Access Management (IAM) is a powerful tool for managing access to AWS resources. However, certain permissions, if left unchecked, can lead to privilege escalation and severe security vulnerabilities. This article explore...
Join discussion
Dec 26, 2023 · 4 min read · vulnerable_lambda is one of the scenarios from CloudGoat - An intentionally vulnerable by design AWS setup. Difficulty: Easy Hands-On Task Initialize the terraform script to set the vulnerable scenario on your AWS account. ./cloudgoat.py create vulne...
Join discussion
