- Join Discord
- Contact & Support
Pricing

Sign in Sign up

AWS IAM Privilege Escalation Labs

15 sections · 36 lessons

Video
Lab
Reading

1 Introduction
2 Introduction to AWS Enumeration
3 iam:CreateAccessKey
1. Lab: [LAB] [CTF] iam:CreateAccessKey PrivEsc Preview
2. Video: iam:CreateAccessKey Solution Preview
4 iam:CreateLoginProfile
1. Lab: [LAB] [CTF] iam:CreateLoginProfile PrivEsc Preview
2. Video: iam:CreateLoginProfile Solution Preview
5 iam:UpdateLoginProfile
1. Lab: [LAB] [CTF] iam:UpdateLoginProfile PrivEsc Preview
2. Video: iam:UpdateLoginProfile Solution Preview
6 iam:SetDefaultPolicyVersion
1. Lab: [LAB] [CTF] iam:SetDefaultPolicyVersion PrivEsc Preview
2. Video: iam:SetDefaultPolicyVersion Solution Preview
7 iam:AddUserToGroup
1. Lab: [LAB] [CTF] iam:AddUserToGroup PrivEsc Preview
2. Video: iam:AddUserToGroup Solution Preview
8 iam:AttachUserPolicy
1. Lab: [LAB] [CTF] iam:AttachUserPolicy PrivEsc Preview
2. Video: iam:AttachUserPolicy Solution Preview
9 iam:AttachGroupPolicy
1. Lab: [LAB] [CTF] iam:AttachGroupPolicy PrivEsc Preview
2. Video: iam:AttachGroupPolicy Solution Preview
10 iam:PutUserPolicy
1. Lab: [LAB] [CTF] iam:PutUserPolicy PrivEsc Preview
2. Reading: iam:PutUserPolicy Solution Preview
11 iam:PutGroupPolicy
1. Lab: [LAB] [CTF] iam:PutGroupPolicy PrivEsc Preview
2. Reading: iam:PutGroupPolicy Solution Preview
12 iam:AttachRolePolicy
1. Lab: [LAB] [CTF] iam:AttachRolePolicy PrivEsc Preview
2. Reading: iam:AttachRolePolicy Solution Preview
13 iam:PutRolePolicy
1. Lab: [LAB] [CTF] iam:PutRolePolicy PrivEsc Preview
2. Reading: iam:PutRolePolicy Solution Preview
14 Challenges
15 Conclusion
1. Reading: What did you think of the course?
2. Reading: What's next? Preview

Section 8 · iam:AttachUserPolicy Free preview

[LAB] [CTF] iam:AttachUserPolicy PrivEsc

Christophe Limpalair

Hands-on lab

IAM AttachUserPolicy PrivEsc

Exploit iam:AttachUserPolicy to grant yourself higher privileges with AWS managed policies. Using your new privileges, gain access to a secret value stored in Secrets Manager that your IAM user should not have been able to access. Complete the lab by submitting the secret value as the flag.

Previousiam:AddUserToGroup Solution

Next iam:AttachUserPolicy Solution

Comments

Loading comments…