Lab: Cloud Security
← EHE
Lab Exercise
Cloud Security: S3 Bucket Enumeration — NovaCorp
SCORE
100
0
/8 objectives
! WARNING
This lab is a
simulated environment
for educational purposes only. All bucket names, credentials, and data are fictional. Accessing real S3 buckets without authorization violates the Computer Fraud and Abuse Act and AWS Terms of Service.
Cloud Audit Complete
All 8 objectives completed. Final score:
100
pts.
Complete Lab
pentester@kali: ~/cloud-lab — AWS S3 Enumeration
pentester@kali:~$
Objectives
▲
Enumerate S3 buckets for NovaCorp
List contents of the public backup bucket
List contents of the dev assets bucket
Download and examine the .env file
Identify exposed AWS credentials
Check bucket ACL permissions
Attempt access to the private production bucket
Document all cloud misconfigurations
S3 Buckets Found
▲
?
novacorp-backups
—
?
novacorp-dev-assets
—
?
novacorp-prod-data
—
?
novacorp-logs
—
Hints
▲
Reveal Next Hint
-5 points per hint · 8 available
Command Reference
▲
lazys3
<keyword>
aws s3 ls
s3://<bucket> --no-sign-request
aws s3 cp
s3://<bucket>/<file> . --no-sign-request
aws s3api get-bucket-acl
--bucket <name> --no-sign-request
aws s3api get-bucket-policy
--bucket <name> --no-sign-request
curl
https://<bucket>.s3.amazonaws.com
report
— summarize findings
help