I was getting a Proxy Server error, but decided to try and complete the room regardless
How many TCP ports are open?
What is the domain of the email address provided in the “Contact” section of the website?
In the absence of a DNS server, which Linux file can we use to resolve hostnames to IP addresses in order to be able to access the websites that point to those hostnames?
Which sub-domain is discovered during further enumeration?
I eventually tried the s3 sub-domain again, and it resolved successfully
Tried gobuster, ffuf, and wfuzz. Wfuzz gave me an error with the s3 sub-domain
Which service is running on the discovered sub-domain?
Answer: Amazon S3
Which command line utility can be used to interact with the service running on the discovered sub-domain?
Use high-level (s3) commands with the AWS CLI
Use the high-level Amazon S3 commands in the aws s3 namespace to manage buckets and objects using the AWS Command Line…
Which command is used to set up the AWS CLI installation?
Set up the AWS CLI
Install the AWS Command Line Interface version 2 (AWS CLI version 2) on your system.
Answer: aws configure
What is the command used by the above utility to list all of the S3 buckets?
Command structure in the AWS CLI
Learn how a AWS Command Line Interface (AWS CLI) command consists of a multipart structure with pieces that must be…
Answer: aws s3 ls
This server is configured to run files written in what web scripting language?
Let’s configure our aws cli (we can provide default/fake values)
When trying to connect to the s3 bucket on the machine, it’s re-directing us to AWS’s site
Is there any way to specify --endpoint-url in aws cli config file
The aws command is aws s3 ls --endpoint-url http://s3.amazonaws.com can I load endpoint-url from any config file…
Submit root flag
We can copy a file to an s3 bucket
We are going to upload a simple PHP webshell
A webshell is a shell that you can access through the web. This is useful for when you have firewalls that filter…
Now, let’s copy this file to the s3 copy, and then verify it uploaded successfully
Let’s cat out our flag