HackerOne announced a time-limited CTF with AWS between April 5 and April 12, 2021. I thought http://flaws.cloud and http://flaws2.cloud were excellent preparation for completing this CTF. The CTF awarded 26 points on HackerOne’s CTF platform, which results in an invitation to a private bug …

AWS has released v2 of its instance metadata service, largely in response to the 2019 Capital One breach. I’ve seen a handful of articles announcing this new feature, how to upgrade to it, and how it is a response to the Capital One breach, but I haven’t read an article that explicitly …