A CloudGoat scenario by Rhino Security Labs and Sebastian Mora, deployed into your own AWS account: from an SSH foothold on an EC2 instance, backdoor an ECS task definition to take the container's role, tag your way into an SSM session on the admin instance, then find and mount the EFS file system.
Not startedDockercommit 07f698ex86_64 · aarch64Secret
One-shot by default: solve each challenge from its prompt alone.
From the ruse box, read the flag stored on the scenario's EFS file system.
The brief for this lab lives in its repository.