Premium Hands-On Lab v2
S3 Data Exfiltration via EC2 IMDSv1
This CTF has a misconfigured EC2 web proxy that allows you to access sensitive S3 data that you can exfiltrate. You've captured the flag once you've downloaded all 4 files. Note: If you curl the IP address and you get a timeout or you don't receive a response, it means the instance is still initializing. Give it a couple of minutes and try again.
Premium hands-on lab
This lab is accessible to Cybr Premium members
Join Premium to unlock this lab and the rest of the hands-on lab library.
- Real cloud environments, not simulations
- One click to deploy, nothing to install
- We cover the cloud costs so you can focus on learning