All rooms Sign in
CloudLesson + challenge Live machinePremium

The Leaky Tenant

A public bucket, a leaked key, and a vault that was never as private as they thought.

A startup's public CDN bucket is a little too public. Enumerate it anonymously, find a backup export that leaks over-privileged access keys, and use them to reach a restricted vault bucket and its flag — all against a real, self-contained S3-compatible store.

Difficulty
Medium
Estimated time
40 min
Points
275 pts
Completions
Completed by 1 player
Authors
By Cyber Academy 4 U
Create a free account to startSign in

What you will learn

  • Enumerate and read a world-readable (public) S3 bucket anonymously
  • Recognise secrets accidentally published in a backup/config export
  • Authenticate to S3 with leaked keys (AWS Signature V4)
  • Exploit an over-privileged IAM policy to reach data it should never touch

What is inside

  1. Task 1 · The Leaky Tenant1 question

Sign in to read the tasks, start the machine and answer the questions.