Business CTF 2023 - Let's Get Cloud: Cloud Hacking Workshop by Panawsome
Source: YouTube · Hack The Box · published Jul 13, 2023 · 24:43
This workshop demonstrates how to approach and solve a cloud security challenge by finding exposed AWS credentials in version control, exploiting a DynamoDB injection vulnerability, and ultimately gaining system access 0:00-0:13.
Key Takeaways:
• Initial reconnaissance reveals open ports including an SVN repository which contains version-controlled code with potential secrets 4:02-5:13.
• By examining older revisions of the code, exposed AWS access keys are discovered, which allow authentication to AWS services 9:51-10:06.
• Using the AWS CLI with the stolen credentials, the attacker can list and subscribe to SNS topics, enabling further access to the application 11:05-11:47.
• A search function on the dark web marketplace interface is vulnerable to DynamoDB injection, which can be exploited to extract user credentials 18:13-18:25.
• A crafted injection payload leveraging DynamoDB's string comparison behavior successfully returns all user credentials, leading to SSH access and obtaining the flag 22:27-23:04.
The workshop demonstrates that cloud challenges can be approached with the same methodology as traditional penetration testing, emphasizing the importance of checking version history for secrets and understanding cloud-specific vulnerabilities 3:12-3:21.
Sources:
- 4:02-5:13 Initial reconnaissance and SVN repository discovery
- 9:51-10:06 Finding AWS access keys in older code revisions
- 11:05-11:47 Using AWS CLI to access SN
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
hi everyone this is Panos from hack the box and welcome to the business ETF of 2023 this is a cloud workshop and we're going to solve that Silence from last year's ctfx Cloud challenge it is called trade a lot of people seem to be intimidated by such silences but we are going to show you how if you approach it us any other box it doesn't matter that is a cloud challenge just before starting we are going to go over some basic concepts that you may want to know so let's not wasting more time so in AWS there are the access keys so the access keys are the function as username and password this is what you use to authenticate to the application while it is not exactly a username in the password you can think of them as such and you will not run into any trouble you will find access Keys usually…