Hazem·Oct 8Solving PwnedLabs’ “Identify the AWS Account ID from a Public S3 Bucket” — One Digit at a TimePwnedLabs gives you a public S3 bucket and asks a simple question: which AWS account owns this thing? AWS account IDs are 12 digits and…
Hazem·Oct 8Solving PwnedLabs’ Breach in the Cloud — From Low-Priv IAM User to S3 Flag via sts:AssumeRoleSo I fired up PwnedLabs’ Breach in the Cloud lab (awscloudtrails3iamCTF), expecting something fancy. What I got was a user called…
marianita_cloud·Oct 2DEFCON 34 Challenge Lab: Data Secrets (Medium) WriteupI completed the Data Secrets lab more than a month ago, during DEFCON 34 week. This was my first time working with Hack Smarter labs, so…
InFMI Cyber Security Consulting Servicesbysubhan·Jun 4AWS S3 Multi-Bucket Compromise via GraphQL Federation SSRFPendahuluan
Redfox Security·Mar 4The AWS Security Checklist Everyone IgnoresCloud security failures rarely come from exotic zero-day vulnerabilities. In AWS environments, breaches most often stem from basic security…
rajasekharyarava·Jan 31Capstone Project 1: Beanstalk Secrets — AWS Pentesting WalkthroughI recently completed the Intro to AWS Pentesting course by HackSmarter, instructed by Tyler Ramsbey. As part of the course, we were given…
SrN·Oct 19, 2025Explotando AWS SNS: Cómo una Suscripción Simple Reveló Secretos Críticos en AWSEn el mundo de la seguridad cloud, a veces los vectores de ataque más simples pueden llevar a compromisos significativos. En este…
SrN·Oct 9, 2025Walkthrough: Escalación de Privilegios en AWS Lambda (Cloudgoat)En este walkthrough explico el proceso de escalación de privilegios en AWS utilizando Lambda, basado en el escenario CloudGoat “Lambda…
Wyatt. V·Aug 31, 2025AWS CLI Manual Walkthrough for Cloudgoat Beanstalk_Secrets ScenarioIn this walkthrough we will be going through the Beanstalk_Secrets scenario from Cloudgoat. We will go through this manually using the AWS…
