- Join Discord
- Contact & Support
Pricing

Sign in Sign up

AWS IAM Privilege Escalation Labs

15 sections · 36 lessons

Video
Lab
Reading

1 Introduction
2 Introduction to AWS Enumeration
3 iam:CreateAccessKey
1. Lab: [LAB] [CTF] iam:CreateAccessKey PrivEsc Preview
2. Video: iam:CreateAccessKey Solution Preview
4 iam:CreateLoginProfile
1. Lab: [LAB] [CTF] iam:CreateLoginProfile PrivEsc Preview
2. Video: iam:CreateLoginProfile Solution Preview
5 iam:UpdateLoginProfile
1. Lab: [LAB] [CTF] iam:UpdateLoginProfile PrivEsc Preview
2. Video: iam:UpdateLoginProfile Solution Preview
6 iam:SetDefaultPolicyVersion
1. Lab: [LAB] [CTF] iam:SetDefaultPolicyVersion PrivEsc Preview
2. Video: iam:SetDefaultPolicyVersion Solution Preview
7 iam:AddUserToGroup
1. Lab: [LAB] [CTF] iam:AddUserToGroup PrivEsc Preview
2. Video: iam:AddUserToGroup Solution Preview
8 iam:AttachUserPolicy
1. Lab: [LAB] [CTF] iam:AttachUserPolicy PrivEsc Preview
2. Video: iam:AttachUserPolicy Solution Preview
9 iam:AttachGroupPolicy
1. Lab: [LAB] [CTF] iam:AttachGroupPolicy PrivEsc Preview
2. Video: iam:AttachGroupPolicy Solution Preview
10 iam:PutUserPolicy
1. Lab: [LAB] [CTF] iam:PutUserPolicy PrivEsc Preview
2. Reading: iam:PutUserPolicy Solution Preview
11 iam:PutGroupPolicy
1. Lab: [LAB] [CTF] iam:PutGroupPolicy PrivEsc Preview
2. Reading: iam:PutGroupPolicy Solution Preview
12 iam:AttachRolePolicy
1. Lab: [LAB] [CTF] iam:AttachRolePolicy PrivEsc Preview
2. Reading: iam:AttachRolePolicy Solution Preview
13 iam:PutRolePolicy
1. Lab: [LAB] [CTF] iam:PutRolePolicy PrivEsc Preview
2. Reading: iam:PutRolePolicy Solution Preview
14 Challenges
15 Conclusion
1. Reading: What did you think of the course?
2. Reading: What's next? Preview

Section 2 · Introduction to AWS Enumeration Free preview

[LAB] Introduction to Amazon S3 Enumeration

Christophe Limpalair

Hands-on lab

Introduction to S3 Enumeration

Learn how to enumerate Amazon S3 including understanding how to use the AWS S3 CLI, which has unique quirks compared to other AWS services. You'll learn how to list buckets & objects, as well as how to download objects from S3 to your local computer. Enumeration is a critical part of security assessments because it gives us a lay of the land, and can help us find potential weaknesses that can be exploited. This lab gives you a safe environment to do exactly that. Capture the flag by submitting the value in object.txt.

Previous[Cheat Sheet] Secrets Manager Enumeration CLI Commands

Next [LAB] [CTF] iam:CreateAccessKey PrivEsc

Comments

Loading comments…