Premium Hands-On Lab v2 Capture the Flag
IAM UpdateLoginProfile PrivEsc
Exploit iam:UpdateLoginProfile to get access to an Amazon S3 bucket containing sensitive data that your IAM user should not have been able to access. This is very similar to iam:CreateLoginProfile with the only difference being the command that you issue. However, to make this lab more interesting, we've increased the difficulty just a little bit. The flag is the credit card number for "Joshua Lee" from the exfiltrated customers file.
Premium hands-on lab
This lab is accessible to Cybr Premium members
Join Premium to unlock this lab and the rest of the hands-on lab library.
- Real cloud environments, not simulations
- One click to deploy, nothing to install
- We cover the cloud costs so you can focus on learning