< All Hands-On Labs

Premium Hands-On Lab v2

S3 Data Exfiltration via EC2 IMDSv1

This CTF has a misconfigured EC2 web proxy that allows you to access sensitive S3 data that you can exfiltrate. You've captured the flag once you've downloaded all 4 files. Note: If you curl the IP address and you get a timeout or you don't receive a response, it means the instance is still initializing. Give it a couple of minutes and try again.

Premium hands-on lab

This lab is accessible to Cybr Premium members

Join Premium to unlock this lab and the rest of the hands-on lab library.

View Plans Already a member? Log in

  • Real cloud environments, not simulations
  • One click to deploy, nothing to install
  • We cover the cloud costs so you can focus on learning