Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Programming - AWS Permission Analysis
Mission
cloud_inventory.json and approved.json are generated from the FLAG injected at startup. Verify forensic-reader's s3:GetObject path and URL-safe-Base64-decode parts to recover the flag.
Hints
Hint 1 Show
Inspect cloud_inventory.json and approved.json and identify the target record
Hint 2 Show
verify forensic-reader's s3:GetObject path and URL-safe-Base64-decode parts
Hint 3 Show
Verify that the reconstructed value has FLAG{...} format