Author: Raj Chandel (published on Hacking Articles) Published: April 22, 2026 Source: https://www.hackingarticles.in/aws-cloudgoat-ec2-ssrf-exploitation/ Summary This Hacking Articles tutorial walks through the ec2_ssrf scenario in CloudGoat, Rhino Security Labs’ open-source “vulnerable by design” AWS training framework. It is a CTF-style, hands-on lab rather than a vulnerability disclosure — there is no CVE. The scenario chains a … Read more
Author: Raj Chandel (published on Hacking Articles) Published: January 16, 2026 Source: https://www.hackingarticles.in/aws-iam-updateloginprofile-abuse/ Summary This Hacking Articles tutorial demonstrates an AWS IAM privilege-escalation technique based on the iam:UpdateLoginProfile permission: a low-privileged IAM user who is allowed to call UpdateLoginProfile against a higher-privileged user can reset that user’s AWS Console password and then sign in as … Read more
Author: Fatima Aziz (published on Hacking Articles) Published: July 12, 2025 Source: https://www.hackingarticles.in/aws-iam-assumerole-privilege-escalation/ Summary This Hacking Articles tutorial demonstrates an AWS IAM privilege-escalation technique driven by misconfiguration rather than a software flaw: a low-privileged IAM user can assume a highly privileged IAM role when that role’s trust policy is written too permissively. By calling sts:AssumeRole … Read more
Author: Fatima Aziz (published on Hacking Articles) Published: July 16, 2025 Source: https://www.hackingarticles.in/aws-iam-createaccesskey-privilege-escalation/ Summary This Hacking Articles tutorial demonstrates a well-known AWS IAM privilege-escalation technique that stems from misconfiguration rather than any software flaw: a low-privileged IAM user who has been granted the iam:CreateAccessKey permission on other users can mint a fresh access key for … Read more
