Tag: pwnedlabs

All the articles with the tag "pwnedlabs".

• Access secrets via s3 bucket versioning

  5 Mar, 2025

  In this lab, we will be solving an lab with an attack vector through a s3 bucket versioning feature and through that we can able to exfil the secrets and elevating further more

• Loot Public EBS Snapshots

  5 Mar, 2025

  In this lab, we will be solving an lab on understanding what ebs snapshots are and there misconfigurations....

• Leverage leaked credentials for pwnage

  2 Mar, 2025

  Finding leaked AWS access keys in a GitHub .env file, using them to enumerate the account, and pivoting into Amazon RDS to escalate and capture the flag

• Plunder Public RDS Snapshots

  2 Mar, 2025

  Enumerating publicly exposed Amazon RDS snapshots from just an AWS account ID, restoring one into my own account, and dumping the database to recover the flag

• Identify the AWS Account ID from a Public S3 Bucket

  24 Feb, 2025

  Getting to know about how we can able to fecth a AWS account ID from a publicly available s3 bucket

• Uncover Secrets in CodeCommit and Docker

  31 Jan, 2025

  In this lab, we will see how the leaked credentials through dockerhub can be leveraged atmost and more further

• Reveal Hidden risks using Securityhub

  8 Jan, 2025

  Walkthrough of exploring AWS securityhub and a simulation activity to identify an issue that lead to some interesting findings

• Breach in the Cloud - Cloudtrial challenge

  9 Feb, 2024

  This is a challenge from pwnedlabs where I've been provided with the cloudtrial logs and from there I've to do log analysis and trying to reproduce the attack from the attacker perspective

• SSRF to Pwned

  9 Feb, 2024

  Lab from pwnedlabs where we have provided with a webserver and we are gonna look into how we can leverage it to SSRF