Cybersecurity tools constantly need to build messages from different pieces of information. A port scanner might need to display a host, port, protocol, and status. A log analyzer might need to rep...

Think about a port scanner: before it can scan anything, it needs information such as a target host, a range of ports, and some scanning options. Once the scan is complete, it communicates the resu...

A variable is simply a named place where you store a piece of information so you can use it later. Variables are the fundamental building blocks of programming, and you’ll find them virtually in e...

I’ve always seen OOP (Object-Oriented Programming) as the closest thing developers have to playing God. You essentially create worlds from scratch, you’re constantly shaping a small version of real...

In this final challenge, you’re given an AWS access key with limited (mostly read-only) permissions. No admin powers, no obvious misconfigurations, this time just pure old-school enumeration. Your...

In this level, you’ll deal with a proxy feature that’s letting an attacker to fetch external resources on behalf of one of your EC2 instances. This may not look dangerous at first, but under the ho...

In this level, your objective is to gain access to a web application. A URL will be provided, and you must authenticate using a valid username and password. The challenge introduces you the follow...

Continuing with our S3 bucket exposure journey, this challenge introduces the following scenario: Scenario: The next level is fairly similar, with a slight twist. Time to find your first AWS ke...

For this challenge you’ll eventually need to create an AWS IAM user, you can use the AWS Free Tier for this purpose, but don’t worry about that just yet, for now, let’s focus on the presented scena...

A Quick Introduction to Flaws If you are looking for a beginner-friendly way to learn AWS security, Flaws is a great place to start. Instead of focusing on common vulnerabilities like SQL injectio...