# Flaws.cloud walkthrough | neo's brain
Flaws.cloud walkthrough

Home Flaws.cloud walkthrough
Post
Cancel

# Flaws.cloud walkthrough

Posted Aug 23, 2023 Updated Aug 23, 2023
By Eric Reymundo
1 min read

## Flaws.cloud walkthrough

DayCyberWox Walkthrough: https://www.youtube.com/watch?v=fEjAryrzLSQ Write up: https://daycyberwox.com/exploiting-aws-1-a-beginners-guide-flawscloud#heading-level1

`

    1
    2
    3
    4

    Through a series of levels you'll learn about common mistakes and gotchas when using Amazon Web Services (AWS). There are no SQL injection, XSS, buffer overflows, or many of the other vulnerabilities you might have seen before. As much as possible, these are AWS specific issues.

    A series of hints are provided that will teach you how to discover the info you'll need. If you don't want to actually run any commands, you can just keep following the hints which will give you the solution to the next level. At the start of each level you'll learn how to avoid the problem the previous level exhibited.

`

Scope: Everything is run out of a single AWS account, and all challenges are sub-domains of flaws.cloud.

Contact
This was built by Scott Piper (@0xdabbad00, summitroute.com)

Feedback is welcome! For security issues, fan mail, hate mail, or whatever else, contact scott@summitroute.com
If you manage to find a flaw that breaks the game for others or some other undesirable issue, please let me know.

Greetz
Thank you for advice and ideas from Andres Riancho (@w3af), @CornflakeSavage, Ken Johnson (@cktricky), and Nicolas Gregoire (@Agarri_FR)

Now for the challenge!

# Level 1

This level is buckets of fun. See if you can find the first sub-domain.

Need a hint? Visit Hint 1

First we begin with `nslookup` and point it to the domain `flaws.cloud`

### Syntax

`

    1

    nslookup flaws.cloud

`

### Result

`

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20

    Server: 172.31.144.1
    Address: 172.31.144.1#53

    Non-authoritative answer:
    Name:   flaws.cloud
    Address: 52.92.196.83
    Name:   flaws.cloud
    Address: 52.92.227.67
    Name:   flaws.cloud
    Address: 52.92.243.131
    Name:   flaws.cloud
    Address: 52.92.250.91
    Name:   flaws.cloud
    Address: 52.218.132.58
    Name:   flaws.cloud
    Address: 52.218.218.82
    Name:   flaws.cloud
    Address: 52.218.237.138
    Name:   flaws.cloud
    Address: 52.92.163.83

`
terminal cloud cybersecurity
This post is licensed under CC BY 4.0 by the author.
Share
Recently Updated

- Mac M1 Run Diablo 4 - Links
- Text and Typography
- Flaws.cloud walkthrough
- M1 Mac - How to Switch the Terminal between x86_64 and arm64
- Admonitions Documentation

Trending Tags
cybersecurity diablo 4 docs terminal diablo M1 apple silicon cheatsheets cloud GCIH
Contents

### Further Reading

Aug 23, 2023

#### SANS SEC 504 - Resources

Malware stuff https://digitalcommons.lsu.edu/cgi/viewcontent.cgi?article=6527&amp;context=gradschool_theses https://github.com/volatilityfoundation/volatility/wiki/Mac Volatility A few volatility...

Aug 23, 2023

#### M1 Mac - How to Switch the Terminal between x86_64 and arm64

How to Switch the Terminal between x86_64 and arm64 https://vineethbharadwaj.medium.com/m1-mac-switching-terminal-between-x86-64-and-arm64-e45f324184d9 Here is a simple writeup on how I switch bet...

Aug 23, 2023

#### Mac M1 Run Diablo 4 - Links

Resources that can help you get started with the Game Porting Tool Kit to run Diablo 4 on Mac M1 architecture. Resources: https://www.outcoldman.com/en/archive/2023/06/07/playing-diablo-4-on-...

Trending Tags
cybersecurity diablo 4 docs terminal diablo M1 apple silicon cheatsheets cloud GCIH

A new version of content is available.