Hazem·Oct 8Solving PwnedLabs’ “Identify the AWS Account ID from a Public S3 Bucket” — One Digit at a TimePwnedLabs gives you a public S3 bucket and asks a simple question: which AWS account owns this thing? AWS account IDs are 12 digits and…
Hazem·Oct 8Solving PwnedLabs’ Breach in the Cloud — From Low-Priv IAM User to S3 Flag via sts:AssumeRoleSo I fired up PwnedLabs’ Breach in the Cloud lab (awscloudtrails3iamCTF), expecting something fancy. What I got was a user called…
marianita_cloud·Sep 29DEFCON 34 Challenge Lab: Beanstalk (Easy) WriteupI completed the Beanstalk lab more than a month ago, during DEFCON 34 week. This was my first time working with Hack Smarter labs, so…
marianita_cloud·Sep 23DEFCON 34 Challenge Lab: Solus (Medium) WriteupI completed the following challenge more than a month ago, during DEFCON 34 week. This was my first time working with Hack Smarter labs…
marianita_cloud·Sep 23DEFCON 34 Challenge Lab: Rotation (Medium) WriteupI completed the Rotation lab more than a month ago, during DEFCON 34 week. This was my first time working with Hack Smarter labs, so there…
marianita_cloud·Sep 19Challenge Lab: Mapper (Medium) — WriteupWe start the lab and wait for it to generate the credentials. This may take 1–2 minutes:
marianita_cloud·Sep 16DEFCON 34 Challenge Lab: Second (Medium) WriteupDuring DEFCON 34 week, more than a month before writing this blog post, Hack Smarter Labs made its labs available for free throughout the…
Razzle Mouse 🐭·Sep 5Hacksmarter AWS Mapper-CTF WriteupPlatform: Hacksmarter | Difficulty: Medium | Category: Cloud (AWS) / IAM Privilege Escalation | Flags: 1/1 | Author: razzle_mouse
Redfox Security·Mar 4The AWS Security Checklist Everyone IgnoresCloud security failures rarely come from exotic zero-day vulnerabilities. In AWS environments, breaches most often stem from basic security…
