< All Hands-On Labs

Free Hands-On Lab v2

Backdoor an S3 Bucket via its Bucket Policy

Using Stratus Red Team, an automated red teaming tool, backdoor an S3 bucket by updating its Bucket Policy to allow access from an external AWS account. This method allows an attacker to access and exfiltrate S3 data, even if the compromised access key is deleted.

Free hands-on lab

Launch this lab with a free account

Build practical, real-world skills in a cloud environment.

Create Free Account Already a member? Log in

  • Real cloud environments, not simulations
  • One click to deploy, nothing to install
  • We cover the cloud costs so you can focus on learning