< All Hands-On Labs

Free Hands-On Lab v2 Capture the Flag

Access Secrets Manager via Lambda Function with LFI

Exploit a Lambda function’s LFI injection vulnerability to compromise a web application, gaining unauthorized access to Secrets Manager. Capture the flag by retrieving the secret value.

Free hands-on lab

Launch this lab with a free account

Build practical, real-world skills in a cloud environment.

Create Free Account Already a member? Log in

  • Real cloud environments, not simulations
  • One click to deploy, nothing to install
  • We cover the cloud costs so you can focus on learning