#nullcon - Pradeep Bhattarai's Blog

Skip to main content

Pradeep Bhattarai's Blog

Pradeep Bhattarai's Blog

Visit website

Command Palette

Search for a command to run...

#nullcon

Articles tagged with #nullcon

Solving Assumptions of Life: Winja CTF | Nullcon Goa 2022
Summary The challenge started with the web page accepting cmd parameter with only env command input. The output of the environment included AWS_ACCOUNT_ID and AWS_ROLE. After obtaining the credentials with assume-role, listing the available S3 bucket...
Sep 10, 20222 min read197
Solving Crater Problem: Winja CTF | Nullcon Goa 2022
Summary The challenge started with the description along with the Terraform state file. This challenge involved the misconfiguration within the AWS policy allowing any AWS account to perform multiple actions against the vulnerable AWS service configu...
Sep 9, 20223 min read551

© 2026 Pradeep Bhattarai's Blog

Archive
Privacy
Terms