cloudgoat icon indicating copy to clipboard operation
cloudgoat copied to clipboard

unintended vulnerability in Scenario: ecs_efs_attack

Open 1nteger-c opened this issue 3 years ago • 0 comments

I found some unintended way to get the flag of the "ecs_efs_attack". But I think it must be patched so I write the issue about this vulnerability.

After command $ ./cloudgoat.py create ecs_efs_attack , I can access to the EC2 instance by using the given private key. In that situation, I tried to mount EFS data. When I tried to mount, some error occur but I can solve that error by install nfs package. $ sudo apt-get install nfs-common After that, I can mount the data and I can see the flag.

1nteger-c avatar Aug 18 '21 19:08 1nteger-c