Challenge #2 – IAM Escape Room

Responses

1. 

   Christophe December 29, 2023

   I’d love your feedback on this challenge lab. Are you finding it too difficult? Is it a fun challenge? Let me know in the comments!

2. 

   mariana-arce-aguilar February 6, 2024

   This course not only taught me how to think like an attacker, but also how easy it is to escalate privileges if excessive IAM permissions are present in the cloud. I honestly loved it and recommend it 100%!

   1. 

      Christophe February 6, 2024

      Yay!!! That just made my day! Thank you for sharing, Mariana, and nice work getting through the entire course :)!

3. 

   Ritesh Gohil February 10, 2024

   Hey @Christophe Limpalair 👋,

   I just wanted to say that Challenge 2 was absolutely fantastic! 🎉 It’s evident that a lot of thought and effort went into crafting it. I really appreciated how it encompassed various learning strategies and commands. One of the standout features for me was how comprehensively it tackled IAM enumeration recon. 👏

   A quick tip for fellow students: It’s super beneficial to create your own notes on AWS CLI commands. Not only will it assist you in cracking Challenge 1, but it’s especially handy for navigating through Challenge 2. 📝

   Keep up the great work! Looking forward to more challenges ahead! 🚀

   1. 

      Christophe February 12, 2024

      Great tip, Ritesh, and thank you for the fantastic feedback :)! Glad you enjoyed it!

4. 

   revanth June 23, 2024

   I thoroughly enjoyed every aspect of this course. The content was engaging and well-structured, and I particularly appreciated the approach it took. Both challenges provided were not only interesting but also highly stimulating. I would strongly recommend this course to anyone interested in AWS Pentesting.

   1. 

      Christophe September 7, 2024

      So glad you enjoyed it! Thank you for taking the time to write this comment and for enrolling in our course 🙂

5. 

   1llus1on September 3, 2024

   Great course Christophe, I really loved the challenges and lab. I was initially planning to study for AWS Certified Security Specialty exam, but it occurred to me that I should first learn attacking AWS which led me to this platform.

   I must say that after doing these courses and labs, my knowledge has not only increased in the offensive side, but on also how can we secure our accounts by adding multiple layers of access controls like Permission Boundaries, Resource Based Policies, SCPs etc.

   I would love you to make a course in the future which covers how various AWS security related services identify and block these attacking methodologies and how we can try to bypass those protections.

   Thanks!

   1. 

      Christophe September 4, 2024

      I really appreciate the comment and I’m thrilled you both enjoyed the course and took away a lot from it! I would recommend these two courses next based on your interests: Introduction to AWS Security — especially the last few sections which talk about IAM Access Analyzer, detection services, and monitoring/alerting services — and Incident Response with CloudTrail Lake and Athena. The second course will show you how blue teams would be able to view activities and respond to incidents, which can be valuable information from a red teaming perspective as well.

6. 

   sahaba November 12, 2025

   Thank you this was a fun one.

   1. 

      Christophe November 12, 2025

      Glad you enjoyed it 🙂

7. 

   Kuljot February 2, 2026

   Hi Christophe,
   LOVED this course. It was one of my favorites so far because it was all hands on labs to cover all the privilege escalation stuff we had learned. It was great exercise to run all the command manually and map out the environment and force the student to apply what they had learned.

   Thankfully I took notes and had descriptions and examples of commands to reference while enumerating

   Would love to see more of this type of content for red/blue team stuff!

8. 

   Steven March 18, 2026

   Loved the challenge, thought I’d cracked it early on but then had to go back a step to move forward again.

9. 

   sudoneorun March 18, 2026

   Just finished the whole course and all the CTF in one afternoon; I really enjoyed it! So far the most exciting course I’ve taken since a while

   1. 

      Christophe March 25, 2026

      <3 love to hear this! Just made my day. Thanks and nice work knocking it out :)