[LAB] [CTF] iam:CreateLoginProfile PrivEsc

Scenario 🧪

The goal of this lab is to exploit the iam:CreateLoginProfile vulnerability to grant yourself permissions that you shouldn’t have access to. You’ve successfully completed this lab once you’ve accessed and downloaded sensitive files containing customer PII in Amazon S3 and submitted the SSN number for “Holly Duncan.”

Steps

• Using the provided Access Key ID and Secret Access Key, configure your AWS CLI profile
• Using the AWS CLI, identify what permissions your current user has access to and perform general reconnaissance to familiarize yourself with the AWS environment
• Gain access to and authenticate as the IAM user ending in Victim
• Using your new permissions, access the S3 bucket containing sensitive data
• Download those files and make sure they contain PII.
• Open the ssn.csv file and copy/paste Holly Duncan’s SSN