Hands-on lab
IAM PutUserPolicy PrivEsc
Exploit iam:PutUserPolicy to grant yourself higher privileges with a custom and inline policy. Using your new privileges, gain access to a secret value stored in Secrets Manager that your IAM user should not have been able to access. Complete the lab by submitting the secret value as the flag.
Comments
Loading comments…