- Join Discord
- Contact & Support
Pricing

Sign in Sign up

AWS IAM Privilege Escalation Labs

15 sections · 36 lessons

Video
Lab
Reading

1 Introduction
2 Introduction to AWS Enumeration
3 iam:CreateAccessKey
1. Lab: [LAB] [CTF] iam:CreateAccessKey PrivEsc Preview
2. Video: iam:CreateAccessKey Solution Preview
4 iam:CreateLoginProfile
1. Lab: [LAB] [CTF] iam:CreateLoginProfile PrivEsc Preview
2. Video: iam:CreateLoginProfile Solution Preview
5 iam:UpdateLoginProfile
1. Lab: [LAB] [CTF] iam:UpdateLoginProfile PrivEsc Preview
2. Video: iam:UpdateLoginProfile Solution Preview
6 iam:SetDefaultPolicyVersion
1. Lab: [LAB] [CTF] iam:SetDefaultPolicyVersion PrivEsc Preview
2. Video: iam:SetDefaultPolicyVersion Solution Preview
7 iam:AddUserToGroup
1. Lab: [LAB] [CTF] iam:AddUserToGroup PrivEsc Preview
2. Video: iam:AddUserToGroup Solution Preview
8 iam:AttachUserPolicy
1. Lab: [LAB] [CTF] iam:AttachUserPolicy PrivEsc Preview
2. Video: iam:AttachUserPolicy Solution Preview
9 iam:AttachGroupPolicy
1. Lab: [LAB] [CTF] iam:AttachGroupPolicy PrivEsc Preview
2. Video: iam:AttachGroupPolicy Solution Preview
10 iam:PutUserPolicy
1. Lab: [LAB] [CTF] iam:PutUserPolicy PrivEsc Preview
2. Reading: iam:PutUserPolicy Solution Preview
11 iam:PutGroupPolicy
1. Lab: [LAB] [CTF] iam:PutGroupPolicy PrivEsc Preview
2. Reading: iam:PutGroupPolicy Solution Preview
12 iam:AttachRolePolicy
1. Lab: [LAB] [CTF] iam:AttachRolePolicy PrivEsc Preview
2. Reading: iam:AttachRolePolicy Solution Preview
13 iam:PutRolePolicy
1. Lab: [LAB] [CTF] iam:PutRolePolicy PrivEsc Preview
2. Reading: iam:PutRolePolicy Solution Preview
14 Challenges
15 Conclusion
1. Reading: What did you think of the course?
2. Reading: What's next? Preview

Section 3 · iam:CreateAccessKey Free preview

[LAB] [CTF] iam:CreateAccessKey PrivEsc

Christophe Limpalair

Hands-on lab

IAM CreateAccessKey PrivEsc

Exploit iam:CreateAccessKey to get access to an Amazon S3 bucket containing sensitive data that your IAM user should not have been able to access. The flag is the credit card number for "Kayla Sanchez" from the exfiltrated customers file.

Previous[LAB] Introduction to Amazon S3 Enumeration

Next iam:CreateAccessKey Solution

Comments

Loading comments…