Little More Help
Little More Help
  • Видео 124
  • Просмотров 143 673
Hacking AWS Services | rce_web_app (Medium / Hard)
CloudGoat (☁️🐐)
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool.
=-=-=-=-=-==-=-==-=-==-=-==-=-==-=-==-=-==-=-=
Note: This is for educational purposes only!
=-=-=-=-=-==-=-==-=-==-=-==-=-==-=-==-=-==-=-=
Starting as the IAM user Lara, the attacker explores a Load Balancer and S3 bucket for clues to vulnerabilities, leading to an RCE exploit on a vulnerable web app which exposes confidential files and culminates in access to the scenario’s goal: a highly-secured RDS database instance.
Alternatively, the attacker may start as the IAM user McDuck and enumerate S3 buckets, eventually leading to SSH keys which grant direct access to the EC2 server and the database beyond...
Просмотров: 134

Видео

Hacking AWS Services | ecs_takeover (Medium / Moderate)21:22Hacking AWS Services | ecs_takeover (Medium / Moderate)
Hacking AWS Services | ecs_takeover (Medium / Moderate)
Просмотров 557 месяцев назад
CloudGoat (☁️🐐) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool. =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Note: This is for educational purposes only! =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Starting with access to the external website the attacker needs to find a remote code execution vulnerability. Through this the attacker can take advantage of resources available...
Hacking AWS Services | ec2_ssrf (Medium / Moderate)19:18Hacking AWS Services | ec2_ssrf (Medium / Moderate)
Hacking AWS Services | ec2_ssrf (Medium / Moderate)
Просмотров 597 месяцев назад
CloudGoat (☁️🐐) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool. =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Note: This is for educational purposes only! =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Starting as the IAM user Solus, the attacker discovers they have ReadOnly permissions to a Lambda function, where hardcoded secrets lead them to an EC2 instance running a web app...
Hacking AWS Services | iam_privesc_by_attachment (Medium / Moderate)20:29Hacking AWS Services | iam_privesc_by_attachment (Medium / Moderate)
Hacking AWS Services | iam_privesc_by_attachment (Medium / Moderate)
Просмотров 947 месяцев назад
CloudGoat (☁️🐐) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool. =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Note: This is for educational purposes only! =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Starting with a very limited set of permissions, the attacker is able to leverage the instance-profile-attachment permissions to create a new EC2 instance with significantly grea...
Hacking AWS Services | cloud_breach_s3 (Small / Moderate)11:11Hacking AWS Services | cloud_breach_s3 (Small / Moderate)
Hacking AWS Services | cloud_breach_s3 (Small / Moderate)
Просмотров 1128 месяцев назад
CloudGoat (☁️🐐) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool. =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Note: This is for educational purposes only! =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Starting as an anonymous outsider with no access or privileges, exploit a misconfigured reverse-proxy server to query the EC2 metadata service and acquire instance profile keys. ...
Hacking AWS Services | lambda_privesc (Small / Easy)27:54Hacking AWS Services | lambda_privesc (Small / Easy)
Hacking AWS Services | lambda_privesc (Small / Easy)
Просмотров 698 месяцев назад
CloudGoat (☁️🐐) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool. =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Note: This is for educational purposes only! =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Starting as the IAM user Chris, the attacker discovers that they can assume a role that has full Lambda access and pass role permissions. The attacker can then perform privilege ...
Hacking AWS Services | iam_privesc_by_rollback (Small / Easy)8:16Hacking AWS Services | iam_privesc_by_rollback (Small / Easy)
Hacking AWS Services | iam_privesc_by_rollback (Small / Easy)
Просмотров 748 месяцев назад
CloudGoat (☁️🐐) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool. =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Note: This is for educational purposes only! =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Starting with a highly-limited IAM user, the attacker is able to review previous IAM policy versions and restore one which allows full admin privileges, resulting in a privilege ...
Hacking AWS Services | vulnerable_cognito (Small / Moderate)22:05Hacking AWS Services | vulnerable_cognito (Small / Moderate)
Hacking AWS Services | vulnerable_cognito (Small / Moderate)
Просмотров 1308 месяцев назад
CloudGoat (☁️🐐) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool. =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Note: This is for educational purposes only! =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= In this scenario, you are presented with a signup and login page with AWS Cognito in the backend. You need to bypass restrictions and exploit misconfigurations in Amazon Cognito ...
Hacking AWS Services | vulnerable_lambda (Small / Easy)27:21Hacking AWS Services | vulnerable_lambda (Small / Easy)
Hacking AWS Services | vulnerable_lambda (Small / Easy)
Просмотров 2899 месяцев назад
CloudGoat (☁️🐐) CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool. =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= Note: This is for educational purposes only! =-=-=-=-=- -=- -=- -=- -=- -=- -=- -=-= In this scenario, you start as the 'bilbo' user. You will assume a role with more privileges, discover a lambda function that applies policies to users, and exploit a vulnerabili...
Introduction to Cloud Hacking | flaws2.cloud LEVEL 38:33Introduction to Cloud Hacking | flaws2.cloud LEVEL 3
Introduction to Cloud Hacking | flaws2.cloud LEVEL 3
Просмотров 889 месяцев назад
flaws2.cloud -all levels =-=-=-=-=-=-=-=-=-=-=-= Level 3 challenge The container's webserver you got access to includes a simple proxy that can be access with: container.target.flaws2.cloud/proxy/flaws.cloud or container.target.flaws2.cloud/proxy/neverssl.com flaws2.cloud LEVEL 3 Walkthrough
Introduction to Cloud Hacking | flaws2.cloud LEVEL 213:32Introduction to Cloud Hacking | flaws2.cloud LEVEL 2
Introduction to Cloud Hacking | flaws2.cloud LEVEL 2
Просмотров 919 месяцев назад
flaws2.cloud -all levels =-=-=-=-=-=-=-=-=-=-=-= Level 2 challenge This next level is running as a container at container.target.flaws2.cloud/. Just like S3 buckets, other resources on AWS can have open permissions. I'll give you a hint that the ECR (Elastic Container Registry) is named "level2". flaws2.cloud LEVEL 2 Walkthrough
Introduction to Cloud Hacking | flaws2.cloud LEVEL 17:13Introduction to Cloud Hacking | flaws2.cloud LEVEL 1
Introduction to Cloud Hacking | flaws2.cloud LEVEL 1
Просмотров 2139 месяцев назад
flaws2.cloud -all levels =-=-=-=-=-=-=-=-=-=-=-= Level 1 For this level, you'll need to enter the correct PIN code. The correct PIN is 100 digits long, so brute forcing it won't help. flaws2.cloud LEVEL 1 Walkthrough
Introduction to Cloud Hacking| flaws.cloud LEVEL 615:09Introduction to Cloud Hacking| flaws.cloud LEVEL 6
Introduction to Cloud Hacking| flaws.cloud LEVEL 6
Просмотров 22210 месяцев назад
flaws.cloud - all levels =-=-=-=-=-=-=-=-=-=-=-= Level 6 For this final challenge, you're getting a user access key that has the SecurityAudit policy attached to it. See what else it can do and what else you might find in this AWS account. Access key ID: AKIAJFQ6E7BY57Q3OBGA Secret: S2IpymMBlViDlqcAnFuZfkVjXrYxZYhP dZ4ps u flaws.cloud LEVEL 6 Walkthrough
Introduction to Cloud Hacking| flaws.cloud LEVEL 58:47Introduction to Cloud Hacking| flaws.cloud LEVEL 5
Introduction to Cloud Hacking| flaws.cloud LEVEL 5
Просмотров 33110 месяцев назад
flaws.cloud -all levels =-=-=-=-=-=-=-=-=-=-=-= Level 5 This EC2 has a simple HTTP only proxy on it. Here are some examples of it's usage: •4d0cf09b9b2d761a7d87be99d17507bce8b86f3b.flaws.cloud/proxy/flaws.cloud/ •4d0cf09b9b2d761a7d87be99d17507bce8b86f3b.flaws.cloud/proxy/summitroute.com/blog/feed.xml •4d0cf09b9b2d761a7d87be99d17507bce8b86f3b.flaws.cloud/proxy/neverssl.com/ See if you can use th...
Introduction to Cloud Hacking| flaws.cloud LEVEL 414:23Introduction to Cloud Hacking| flaws.cloud LEVEL 4
Introduction to Cloud Hacking| flaws.cloud LEVEL 4
Просмотров 38210 месяцев назад
flaws.cloud -all levels =-=-=-=-=-=-=-=-=-=-=-= Level 4 For the next level, you need to get access to the web page running on an EC2 at 4d0cf09b9b2d761a7d87be99d17507bce8b86f3b.flaws.cloud It'll be useful to know that a snapshot was made of that EC2 shortly after nginx was setup on it.
Introduction to Cloud Hacking| flaws.cloud LEVEL 39:34Introduction to Cloud Hacking| flaws.cloud LEVEL 3
Introduction to Cloud Hacking| flaws.cloud LEVEL 3
Просмотров 27010 месяцев назад
Introduction to Cloud Hacking| flaws.cloud LEVEL 3
Introduction to Cloud Hacking| flaws.cloud LEVEL 25:52Introduction to Cloud Hacking| flaws.cloud LEVEL 2
Introduction to Cloud Hacking| flaws.cloud LEVEL 2
Просмотров 25710 месяцев назад
Introduction to Cloud Hacking| flaws.cloud LEVEL 2
Introduction to Cloud Hacking| flaws.cloud LEVEL 17:32Introduction to Cloud Hacking| flaws.cloud LEVEL 1
Introduction to Cloud Hacking| flaws.cloud LEVEL 1
Просмотров 52911 месяцев назад
Introduction to Cloud Hacking| flaws.cloud LEVEL 1
How to use PGP Encryption | This is how Asymmetric Encryption Works DEMO | GNU PG12:15How to use PGP Encryption | This is how Asymmetric Encryption Works DEMO | GNU PG
How to use PGP Encryption | This is how Asymmetric Encryption Works DEMO | GNU PG
Просмотров 49511 месяцев назад
How to use PGP Encryption | This is how Asymmetric Encryption Works DEMO | GNU PG
GNU PG Installation | Kleopatra Installation3:26GNU PG Installation | Kleopatra Installation
GNU PG Installation | Kleopatra Installation
Просмотров 3,3 тыс.11 месяцев назад
GNU PG Installation | Kleopatra Installation
ngrok | Put localhost on the internet & Reverse Shell15:36ngrok | Put localhost on the internet & Reverse Shell
ngrok | Put localhost on the internet & Reverse Shell
Просмотров 2,8 тыс.Год назад
ngrok | Put localhost on the internet & Reverse Shell
9. Exploiting XXE to retrieve data by repurposing a local DTD2:009. Exploiting XXE to retrieve data by repurposing a local DTD
9. Exploiting XXE to retrieve data by repurposing a local DTD
Просмотров 258Год назад
9. Exploiting XXE to retrieve data by repurposing a local DTD
8. Exploiting XXE via image file upload5:218. Exploiting XXE via image file upload
8. Exploiting XXE via image file upload
Просмотров 395Год назад
8. Exploiting XXE via image file upload
6. Exploiting blind XXE to retrieve data via error messages3:026. Exploiting blind XXE to retrieve data via error messages
6. Exploiting blind XXE to retrieve data via error messages
Просмотров 245Год назад
6. Exploiting blind XXE to retrieve data via error messages
7. Exploiting XInclude to retrieve files1:587. Exploiting XInclude to retrieve files
7. Exploiting XInclude to retrieve files
Просмотров 150Год назад
7. Exploiting XInclude to retrieve files
5. Exploiting blind XXE to exfiltrate data using a malicious external DTD4:345. Exploiting blind XXE to exfiltrate data using a malicious external DTD
5. Exploiting blind XXE to exfiltrate data using a malicious external DTD
Просмотров 352Год назад
5. Exploiting blind XXE to exfiltrate data using a malicious external DTD
4. Blind XXE with out-of-band interaction via XML parameter entities2:274. Blind XXE with out-of-band interaction via XML parameter entities
4. Blind XXE with out-of-band interaction via XML parameter entities
Просмотров 197Год назад
4. Blind XXE with out-of-band interaction via XML parameter entities
3. Blind XXE with out-of-band interaction2:243. Blind XXE with out-of-band interaction
3. Blind XXE with out-of-band interaction
Просмотров 177Год назад
3. Blind XXE with out-of-band interaction
2. Exploiting XXE to perform SSRF attacks4:432. Exploiting XXE to perform SSRF attacks
2. Exploiting XXE to perform SSRF attacks
Просмотров 96Год назад
2. Exploiting XXE to perform SSRF attacks
1. Exploiting XXE using external entities to retrieve files3:061. Exploiting XXE using external entities to retrieve files
1. Exploiting XXE using external entities to retrieve files
Просмотров 319Год назад
1. Exploiting XXE using external entities to retrieve files

Комментарии

  • @ergominion
    @ergominion 17 дней назад

    Great video.Thank you very much.

  • @emiledestructeur
    @emiledestructeur 28 дней назад

    WORKS!

  • @MustafaGains
    @MustafaGains Месяц назад

    thats create explain thx , am doing this lab now

  • @moaminmurtadha6768
    @moaminmurtadha6768 Месяц назад

    thx bro 🖤

  • @NeoSports-j6j
    @NeoSports-j6j 2 месяца назад

    I h4te AWS, why do they complicate everything??

  • @ayushsharma7008
    @ayushsharma7008 2 месяца назад

    GOAT

  • @ichrak-jdidi
    @ichrak-jdidi 2 месяца назад

    A simple explanation and perfectly articulated thinking to solve the level! Amazing video :>

  • @mitkosokolov9382
    @mitkosokolov9382 2 месяца назад

    i cant connect my bluetooth mic to rpi in HFP. Any help?

  • @Tayk-wx2zc
    @Tayk-wx2zc 2 месяца назад

    mine dont have the .exe and i followed all the steps?

  • @Yo-rw7mq
    @Yo-rw7mq 3 месяца назад

    thanks buddy

  • @Aditya.Rawat45
    @Aditya.Rawat45 3 месяца назад

    I've been trying each and everything since yesterday,thanks a lot🥲🥲🥲

  • @amangupta5273
    @amangupta5273 3 месяца назад

    Love from India❤❤

  • @amangupta5273
    @amangupta5273 3 месяца назад

    I will keep watching kindly complete the authentication lab

  • @amangupta5273
    @amangupta5273 3 месяца назад

    Awesome video

  • @amangupta5273
    @amangupta5273 3 месяца назад

    Well we should

  • @amangupta5273
    @amangupta5273 3 месяца назад

    Nobody subscribes to hackers

  • @amangupta5273
    @amangupta5273 3 месяца назад

    Thank u boss

  • @carsonjamesiv2512
    @carsonjamesiv2512 3 месяца назад

    😃👍

  • @carsonjamesiv2512
    @carsonjamesiv2512 3 месяца назад

    👍😃

  • @ravidiekanayaka2625
    @ravidiekanayaka2625 3 месяца назад

    Thank u so much brooo 😊✌💞 I fixed the issue ❤

  • @mellon3761
    @mellon3761 3 месяца назад

    thanks!!!

  • @dharmaprasad723
    @dharmaprasad723 3 месяца назад

    Hmm. We’re having trouble finding that site. (burp , burpsuite) notworking

  • @rajkumar-qc4lr
    @rajkumar-qc4lr 4 месяца назад

    Thank you brother ❤

  • @phoebeoigara1569
    @phoebeoigara1569 4 месяца назад

    Your tutorials on these aws scenarios are amaziiinggg!! great job and thank you.😊😊

  • @rowthiraravana9285
    @rowthiraravana9285 4 месяца назад

    Bro it’s not solved

  • @MrNevendar
    @MrNevendar 4 месяца назад

    Is it possible to automate this process?

    • @LittleMoreHelp
      @LittleMoreHelp 4 месяца назад

      Sure, but this is a one time thing, once you set it up you're good to go.

  • @antonisstellas741
    @antonisstellas741 4 месяца назад

    man thank you very much!

  • @neiltropolis
    @neiltropolis 4 месяца назад

    Is there away to solve this lab out with the community edition? Thank you

    • @LittleMoreHelp
      @LittleMoreHelp 4 месяца назад

      Not sure if Community Edition supports Burp Collaborator, but there are other tools or websites you can use that can do the same thing Collaborator does.

  • @TheSobieskiukas
    @TheSobieskiukas 4 месяца назад

    Can't find the site same problem

    • @LittleMoreHelp
      @LittleMoreHelp 4 месяца назад

      If you cannot reach that site, it might mean that you do not have your "Proxy" turned on. You need to turn on your Proxy between Firefox and Burp, and then follow the steps shown

  • @PenReshwet
    @PenReshwet 4 месяца назад

    This works on Kali Linux too!!!! Although I will say I had to go with mousepoll=4

  • @PrenticeIpanemia
    @PrenticeIpanemia 4 месяца назад

    Mine did not have .exe after it, and came up as file not found?

    • @LittleMoreHelp
      @LittleMoreHelp 4 месяца назад

      You might have installed wrong OS's file

  • @ibraheemali9541
    @ibraheemali9541 4 месяца назад

    website wont open even after installing it

    • @LittleMoreHelp
      @LittleMoreHelp 4 месяца назад

      Email me, I'll try to help

    • @HubertMarandu
      @HubertMarandu 2 месяца назад

      @@LittleMoreHelp help me it does not open burpsuite

  • @ky-effect2717
    @ky-effect2717 5 месяцев назад

    explained very clearly thank you

  • @xbeast7585
    @xbeast7585 5 месяцев назад

    Thank You So Much <3

  • @VideoNash
    @VideoNash 5 месяцев назад

    thanks

  • @neiltropolis
    @neiltropolis 5 месяцев назад

    You are the Man! Many thanks homie 🙏🙏🙏

  • @rv60252
    @rv60252 5 месяцев назад

    Thanks for this video ♥️😊

  • @summahellraiser
    @summahellraiser 6 месяцев назад

    Life Saver for a noob like me

  • @ramseyibe2844
    @ramseyibe2844 6 месяцев назад

    Thank you very much Your explanation was so easy to understand

  • @belve1337
    @belve1337 6 месяцев назад

    i cant go to burpsuite it says forbidden

  • @yoiichinichio7781
    @yoiichinichio7781 6 месяцев назад

    thx

  • @ericmusa7250
    @ericmusa7250 6 месяцев назад

    Man thanks a lot, you are the best to have ever explained this issue and my problem has been solved. I hope others find help here too. Thank you. Now I can go ace my cmit495

  • @user-zj2uz6uh2u
    @user-zj2uz6uh2u 7 месяцев назад

    what terminal are you using?

  • @kauenunes6
    @kauenunes6 7 месяцев назад

    thaks

  • @kauenunes6
    @kauenunes6 7 месяцев назад

    Tanks

  • @-DaddyBigFish
    @-DaddyBigFish 7 месяцев назад

    Amazing - love your style of video - keep going man!

  • @chulumadolo3392
    @chulumadolo3392 7 месяцев назад

    do we manually add peter as default password on the password list?

    • @LittleMoreHelp
      @LittleMoreHelp 7 месяцев назад

      Not only that, you also have to follow the format shown in the video. Please re-watch and make sure you do is exactly as I've done it in the video.

  • @nirodhawickramarathna5676
    @nirodhawickramarathna5676 7 месяцев назад

    Thanks it worked for me

  • @rohithantony9743
    @rohithantony9743 7 месяцев назад

    love you bro. ispent nearly 6 hours for this

  • @eyesoffloraandfauna8728
    @eyesoffloraandfauna8728 7 месяцев назад

    │ Error: file provisioner error after 2:39 help

    • @LittleMoreHelp
      @LittleMoreHelp 7 месяцев назад

      Try running: ` $ ./cloudgoat.py config profile $ ./cloudgoat.py config whitelist --auto ` Or update your whitelist.txt

    • @eyesoffloraandfauna8728
      @eyesoffloraandfauna8728 7 месяцев назад

      @@LittleMoreHelp u didnt turn off public access option

    • @LittleMoreHelp
      @LittleMoreHelp 7 месяцев назад

      @@eyesoffloraandfauna8728 Thank you for letting me know, but I deleted all the resources related to each challenge after I am done with them