Security · Difficulty 2 of 5 · 15 min
Injection attempts reach the application
A penetration test shows injection payloads reaching the application, although a request filter is in place and its logs show rules being evaluated. More than one rule set exists. Find out which one stands in front of the public storefront and stop the attacks getting through.
Where the symptom shows: Elastic Load Balancing
Take this challenge on a live account
A live AWS account, already broken, and a clock. You fix it with the provider's own console and command line, then read a report of how you worked. We host the cloud account. Nothing lands on your bill.
More challenges
- SecurityStorefront slows down under a traffic surgeElastic Load Balancing · 15 min · level 2
- SecurityOpen to the whole internetS3 · 5 min · level 1
- SecurityA protected route answers anyoneAPI Gateway · 5 min · level 1
- SecurityInvestigators cannot reconstruct an intrusionCloudTrail · 45 min · level 4
- SecurityDefences look active but let everything throughElastic Load Balancing · 45 min · level 4
- SecurityA regulated data set fails its auditS3 · 90 min · level 5