Challenge #1 – Secrets Unleashed

Responses

1. 

   1llus1on September 3, 2024

   A great challenge, one thing that i like about this one is that we can check our PermissionsBoundary policies details and they will come handy in a sense that later on, you can see which given policies overlaps with the ones that are whitelisted for us that helps us narrow down our approach.

2. 

   Syed September 19, 2025

   HINTS:

   [challenge: Secrets Unleashed]
   [LIST-USER-INLINE-POLICIES]
   [LIST-GROUP]
   [LIST-GROUPS-FOR-USERS]
   [LIST_INLINE_GROUP_POLICIES]
   [LIST_ATTACHED_GROUP_POLICIES]
   [LIST-ROLES]
   [GET-GROUP-INLINE-POLICY (INFRA)]

   EXPLOIT STARTS HERE>>>
   (with elevated privilidge u can list roles now)
   [ATTACH-ROLE-POLICY]
   [ASSUME-ROLE]
   [AWS-CONFIGURE PROFILE]
   [LIST-SECRETS]
   [GET-SECRET-VALUE]
   [DECODE]

3. 

   Steven March 17, 2026

   I’ve been banging my head off a wall for the past 2 days trying to solve this while on nightshift. First day off, solve it in 10 minutes. Great challenge!!

   1. 

      Christophe March 17, 2026

      Love this! Great job persevering. Hope others seeing this who don’t get it the first time get motivated to keep trying!