Exploit a Lambda function’s SQL injection vulnerability to grant yourself privileges that let you access a secret from Secrets Manager you shouldn’t have access to. You’ve captured the flag when you’re able to read, in plaintext, the vault-password value. Inspired by CloudGoat’s Vulnerable Lambda scenario but slightly modified to challenge your understanding.
Members can find this lab in the Pentesting AWS Environments with Pacu, CloudGoat, and ChatGPT course
Practical Learning. Dive in and learn cloud security at your own pace with real AWS resources and real-world scenarios
1-Click Deployments. AWS lab environments at the click of a button. Skip the hassle of creating practice accounts and dive straight into using real resources
Risk Free. Keep vulnerable training environments far away from your corporate resources.
Never worry about costs. No surprise bills when you forget to turn off or delete resources
Please confirm you want to block this member.
You will no longer be able to:
Please allow a few minutes for this process to complete.
