< All Hands-On Labs

Premium Hands-On Lab v2 Capture the Flag

IAM Challenge – Secrets Unleashed

In this Challenge Lab, find IAM PrivEsc vulnerabilities that enable you to access a secret API key stored in Secrets Manager from a lower privileged user to prove to your client that there are serious vulnerabilities in the organization's AWS environments. Capture the flag by decoding the secret value and revealing it in plain text.

Premium hands-on lab

This lab is accessible to Cybr Premium members

Join Premium to unlock this lab and the rest of the hands-on lab library.

View Plans Already a member? Log in

  • Real cloud environments, not simulations
  • One click to deploy, nothing to install
  • We cover the cloud costs so you can focus on learning