Tag feed

#flawscloud

12 posts0 followers

Explore Hashnode

Alternatives

Trending tags this week

GGoodycybgoodycyb.hashnode.devSep 29, 2024 · 2 min read

Threat detection🕵️‍♂️ With Flaws.cloud CloudTrail Logs using ELK Stack

This project demonstrates the deployment of the ELK Stack on an AWS EC2 instance and the ingestion of Flaws.cloud CloudTrail logs into the ELK Stack for threat detection. 💡 Side Note: When you click on the link in each step, you will be redirected...

0

AGAkanksha Girisecureshells.hashnode.devAug 28, 2024 · 7 min read

flAWS Walkthrough Level 4 - Level 6

LEVEL 4 First, I tried to directly access the URL of EC2 instance but it needed credentials. So from the description it looks like we don’t have access to EC2 but we’ve permission to take backups or snapshots of EC2 and then we can load it in our o...

0

AGAkanksha Girisecureshells.hashnode.devAug 28, 2024 · 5 min read

flAWS Walkthrough Level1 - Level3

LEVEL 1 In Level 1 of the flAWS challenge, we explore AWS S3 buckets and their security implications. The key goal in this level is to uncover the first sub-domain by understanding how S3 bucket permissions work and how they can be misconfigured. Le...

0

GGoodycybgoodycyb.hashnode.devAug 11, 2023 · 4 min read

Level-1: Input validation leading to compromises

First, see how to identify IPs and sub-domains associated with flaws2.cloud using nslookup Several IP addresses were identified. Now using nslookup command on the discovered IPs An AWS S3 bucket was identified: s3-website-us-east-1.amazonaws.co...

0

GGoodycybgoodycyb.hashnode.devAug 11, 2023 · 3 min read

Level 2 - Containers Environmental Variables

As stated in the Instruction, this level is operating within a container, resembling the setup of a website hosted on an S3 bucket along with other resources having open permissions. Just as a hint, the Elastic Container Registry (ECR) is named "leve...

0

GGoodycybgoodycyb.hashnode.devAug 11, 2023 · 2 min read

Level-3: Metadata Services at 169.254.170.2

For Level 3, the container’s webserver can be accessed with http://container.target.flaws2.cloud/proxy/http://flaws.cloud or http://container.target.flaws2.cloud/proxy/http://neverssl.com NOTE Credentials Location: EC2 instances store their IAM rol...

0

GGoodycybgoodycyb.hashnode.devAug 8, 2023 · 7 min read

Analyzing CloudTrail Logs for AWS Security Incidents.

🚀 Sign up for the challenge Here by Cyber-defender for Free AIM This lab aims to analyze the CloudTrail logs for AWS security incidents related to the IAM User "Security”. Disclaimer Keep in mind that the challenge questions are not directly stated ...

0

GGoodycybgoodycyb.hashnode.devJun 20, 2023 · 4 min read

Level -6: "Auditing misconfigured IAM Account”

In this final challenge, we are provided with a user access key that has the Security Audit policy attached to it. We are tasked with exploring the capabilities of this access key and uncovering any additional information or resources within the AWS ...

0

GGoodycybgoodycyb.hashnode.devJun 20, 2023 · 5 min read

Level - 5: Exploiting Exposed Meta-Data

Welcome to Level 5. For this level, we are given access to an EC2 instance hosting a simple HTTP proxy. The proxy allows us to access external resources through it. We are tasked with using this proxy to list the contents of the level 6 bucket level6...

0

GGoodycybgoodycyb.hashnode.devJun 20, 2023 · 13 min read

Level - 4: Exploiting Unencrypted EBS volume Snapshots

Welcome to Level 4. We have been assigned the task of accessing the web page running on an EC2 at 4d0cf09b9b2d761a7d87be99d17507bce8b86f3b.flaws.cloud for this level. 💡 💡 Recall at the end of Level -3, we were able to view the secret access key cr...

0

#flawscloud

Search Hashnode

#flawscloud

Explore Hashnode

Trending tags this week

Threat detection🕵️‍♂️ With Flaws.cloud CloudTrail Logs using ELK Stack

flAWS Walkthrough Level 4 - Level 6

flAWS Walkthrough Level1 - Level3

Level-1: Input validation leading to compromises

Level 2 - Containers Environmental Variables

Level-3: Metadata Services at 169.254.170.2

Analyzing CloudTrail Logs for AWS Security Incidents.

Level -6: "Auditing misconfigured IAM Account”

Level - 5: Exploiting Exposed Meta-Data

Level - 4: Exploiting Unencrypted EBS volume Snapshots