cloudgoat
cloudgoat copied to clipboard
unintended vulnerability in Scenario: ecs_efs_attack
I found some unintended way to get the flag of the "ecs_efs_attack". But I think it must be patched so I write the issue about this vulnerability.
After command $ ./cloudgoat.py create ecs_efs_attack
, I can access to the EC2 instance by using the given private key.
In that situation, I tried to mount EFS data. When I tried to mount, some error occur but I can solve that error by install nfs package.
$ sudo apt-get install nfs-common
After that, I can mount the data and I can see the flag.