Aug 28, 2024 · 7 min read · LEVEL 4 First, I tried to directly access the URL of EC2 instance but it needed credentials. So from the description it looks like we don’t have access to EC2 but we’ve permission to take backups or snapshots of EC2 and then we can load it in our o...
Join discussion
Aug 28, 2024 · 5 min read · LEVEL 1 In Level 1 of the flAWS challenge, we explore AWS S3 buckets and their security implications. The key goal in this level is to uncover the first sub-domain by understanding how S3 bucket permissions work and how they can be misconfigured. Le...
Join discussion
Jun 19, 2023 · 6 min read · Welcome to Level -3. At this level, we are tasked with finding secret content in one of the S3 bucket files (“.git file"). The next level is at Level 3 link When you click on the level 3 link, you will find the list of git files as shown below on y...
Join discussion
Jun 17, 2023 · 6 min read · Welcome to Level 1. For this level, we are challenged to find the first sub-domain associated with flaws.cloud NB: You can click Hint 1 to view more details on how to solve the challenge. I recommend you follow the steps below before viewing the HIN...
Join discussion
Jan 17, 2023 · 5 min read · Here is another interesting article by CyberSecSimplify for all cloud security enthusiasts, particularly those interested in cloud pentesting. This article delves into the latest developments and trends in the field of cloud security, with a specific...
Join discussion