< All Hands-On Labs

Free Hands-On Lab Capture the Flag

Pentesting AWS Lambda with CloudFox

Leveraging the automated cloud-focused pentesting tool CloudFox, learn how to uncover Lambda security issues. You’ll identify exposed secrets and misconfigurations in serverless applications in order to find and capture a flag!

Free hands-on lab

Launch this lab with a free account

Build practical, real-world skills in a cloud environment.

Create Free Account Already a member? Log in

  • Real cloud environments, not simulations
  • One click to deploy, nothing to install
  • We cover the cloud costs and risks so you can focus on learning

9 comments

Comments are currently read-only while we migrate to our new platform. In the meantime, ask questions in Discord.

  1. yogeesh

    I Submitted the flag Cybr{public_lambda_admin_access_exposed} but its not taking

    1. Christophe

      Instructor

      The flag is just the part contained within the curly brackets, not that entire string. I’ll make a note in the lab guide so that’s more obvious!

      1. dev13

        after submitting the curly bracket part “{public_lambda_admin_access_exposed}” still flag is invalid

        1. Christophe

          Instructor

          Submit the string without the brackets :)

  2. Ivan

    Great task. Thanks guys

  3. Siddhesh

    Nice labs, but my cloudfox wont show any output even though aws configuration and other set properly. I am used to with cloudfox but this time it failed. always trust aws-cli output.

    1. Christophe

      Instructor

      If you’re having issues running Cloudfox in our lab environment, share more info about errors or whatever else you’re experiencing so I can help you troubleshoot

  4. Deon Ricks

    I enjoy solving my first CTF in pentesting

    1. Christophe

      Instructor

      awesome, congrats! You picked a fun one to start with!