Hazem·Oct 8Solving PwnedLabs’ “Identify the AWS Account ID from a Public S3 Bucket” — One Digit at a TimePwnedLabs gives you a public S3 bucket and asks a simple question: which AWS account owns this thing? AWS account IDs are 12 digits and…
Hazem·Oct 8Solving PwnedLabs’ Breach in the Cloud — From Low-Priv IAM User to S3 Flag via sts:AssumeRoleSo I fired up PwnedLabs’ Breach in the Cloud lab (awscloudtrails3iamCTF), expecting something fancy. What I got was a user called…
marianita_cloud·Oct 2DEFCON 34 Challenge Lab: Data Secrets (Medium) WriteupI completed the Data Secrets lab more than a month ago, during DEFCON 34 week. This was my first time working with Hack Smarter labs, so…
InFMI Cyber Security Consulting Servicesbysubhan·Jun 4AWS S3 Multi-Bucket Compromise via GraphQL Federation SSRFPendahuluan
