You are viewing a single comment's thread from:
RE: Lambda Shell - A site to explore the security of AWS Lambda
Description on the site:"This is a simple AWS lambda function that does a straight exec. Essentially giving you a shell directly in my AWS infrastructure to just run your commands. A security teams worst nightmare.
Do whatever you want. Ultimate goal: take over the account, escalate privs or find some sensitive info.
Configured with all default permissions and settings. This service will sit for a bit and if nothing interesting happens it will be reconfigured very insecurely to see what happens.
$1,000 Bounty. Found something? Let me know at [email protected]"