I’ve always seen OOP (Object-Oriented Programming) as the closest thing developers have to playing God. You essentially create worlds from scratch, you’re constantly shaping a small version of real...

In this final challenge, you’re given an AWS access key with limited (mostly read-only) permissions. No admin powers, no obvious misconfigurations, this time just pure old-school enumeration. Your...

In this level, you’ll deal with a proxy feature that’s letting an attacker to fetch external resources on behalf of one of your EC2 instances. This may not look dangerous at first, but under the ho...

In this level, your objective is to gain access to a web application. A URL will be provided, and you must authenticate using a valid username and password. The challenge introduces you the follow...

Continuing with our S3 bucket exposure journey, this challenge introduces the following scenario: Scenario: The next level is fairly similar, with a slight twist. Time to find your first AWS ke...

For this challenge you’ll eventually need to create an AWS IAM user, you can use the AWS Free Tier for this purpose, but don’t worry about that just yet, for now, let’s focus on the presented scena...

A Quick Introduction to Flaws If you are looking for a beginner-friendly way to learn AWS security, Flaws is a great place to start. Instead of focusing on common vulnerabilities like SQL injectio...

As a cybersecurity generalist at Commonwealth Bank, having a basic understanding of penetration testing is essential. Penetration testing simulates real-world attacks to identify vulnerabilities in...

This challenge is a bit different and harder than the previous ones. In this scenario, Sam has developed a music website, but unfortunately, he doesn’t really understands how Apache works. When yo...

This time, Sam went for a more temporary and “hidden” approach for user authentication. Unfortunately for him, he forgot one small detail: users weren’t just clicking buttons, they actually knew th...