< All Hands-On Labs

Premium Hands-On Lab v2 Capture the Flag

IAM UpdateLoginProfile PrivEsc

Exploit iam:UpdateLoginProfile to get access to an Amazon S3 bucket containing sensitive data that your IAM user should not have been able to access. This is very similar to iam:CreateLoginProfile with the only difference being the command that you issue. However, to make this lab more interesting, we've increased the difficulty just a little bit. The flag is the credit card number for "Joshua Lee" from the exfiltrated customers file.

Premium hands-on lab

This lab is accessible to Cybr Premium members

Join Premium to unlock this lab and the rest of the hands-on lab library.

View Plans Already a member? Log in

  • Real cloud environments, not simulations
  • One click to deploy, nothing to install
  • We cover the cloud costs so you can focus on learning