S3 Bucket Listing

Identify the S3 URL query parameter that reveals an exposed bucket listing.

IAM Privilege Escalation

Identify the IAM permission abused to create admin-level access keys.

EC2 UserData Secrets

Extract the hardcoded database password from an EC2 UserData bootstrap script.

Lambda Credential Theft

Identify which Lambda environment variable provides AWS credentials for privilege escalation.

Privileged Container Escape

Identify the Docker flag that enables a container escape via host filesystem access.

Kubernetes Secret Exfiltration

Identify the overpermissioned RBAC grant that enabled cluster admin access from a pod.

CloudTrail Blind Spot

Identify the AWS service that detects CloudTrail being disabled.

Cross-Account Role Pivot

Identify the AWS STS API call used to assume a role in another account.