Cloud Security
3 missions#16
Cloud Bucket Leakage
A public S3 bucket is over-sharing assets. List its contents and find the exposed secret.
#21SSRF - Cloud Metadata
A stock-ticker proxy accepts arbitrary URLs. Force the backend to request the cloud metadata service.
#30S3 Public Write
A bucket policy allows public PutObject. Abuse it to overwrite an exposed config file.