< All Hands-On Labs

Premium Hands-On Lab v2 Capture the Flag

IAM PutRolePolicy PrivEsc

You can assume a role that grants you access to an Amazon S3 bucket. However, you've discovered an IAM misconfiguration that will enable you to escalate your privileges. Use iam:PutRolePolicy to grant this role increased privileges through custom IAM policies. Then, assume the role to obtain access to sensitive data in Secrets Manager that your IAM user would otherwise be restricted from accessing. You have successfully finished the lab once you've submitted the stored secret in plaintext after decoding it.

Premium hands-on lab

This lab is accessible to Cybr Premium members

Join Premium to unlock this lab and the rest of the hands-on lab library.

View Plans Already a member? Log in

  • Real cloud environments, not simulations
  • One click to deploy, nothing to install
  • We cover the cloud costs so you can focus on learning