Cloudدرس وتحدٍّ آلة حيّةبريميوم

The Leaky Tenant

A public bucket, a leaked key, and a vault that was never as private as they thought.

A startup's public CDN bucket is a little too public. Enumerate it anonymously, find a backup export that leaks over-privileged access keys, and use them to reach a restricted vault bucket and its flag — all against a real, self-contained S3-compatible store.

الصعوبة: متوسط
الوقت المتوقّع: 40 د
النقاط: 275 نقطة
مرات الإكمال: أكملها لاعب واحد
المؤلفون: إعداد Cyber Academy 4 U

أنشئ حسابًا مجانيًا لتبدأ تسجيل الدخول

ما ستتعلّمه

Enumerate and read a world-readable (public) S3 bucket anonymously
Recognise secrets accidentally published in a backup/config export
Authenticate to S3 with leaked keys (AWS Signature V4)
Exploit an over-privileged IAM policy to reach data it should never touch

ماذا تتضمّن

المهمة 1 · The Leaky Tenantسؤال واحد

سجّل الدخول لقراءة المهام وتشغيل الجهاز والإجابة عن الأسئلة.