< All Hands-On Labs

Free Hands-On Lab Capture the Flag

IAM CreateLoginProfile PrivEsc

Exploit iam:CreateLoginProfile to get access to an Amazon S3 bucket containing sensitive data that your IAM user should not have been able to access. The flag is the SSN number for "Holly Duncan" from the "ssn.csv" file.

Free hands-on lab

Launch this lab with a free account

Build practical, real-world skills in a cloud environment.

Create Free Account Already a member? Log in

  • Real cloud environments, not simulations
  • One click to deploy, nothing to install
  • We cover the cloud costs and risks so you can focus on learning

2 comments

Comments are currently read-only while we migrate to our new platform. In the meantime, ask questions in Discord.

  1. Marinho Medrado

    Hello, Christophe.
    I’m not able to login via console with the credentials configured in the lab. I followed the steps on the guide and watched the video to make sure I was letting something pass by, but couldn’t notice anything different. Can you help me with this please? Thank you!

    1. Christophe

      Instructor

      Can you describe the issue/error you are experiencing? It could be the sign in link, because AWS is transitioning to a new sign in process and page which has been breaking some stuff. My guess is it’s that!