Comments (1)
SpenGietz
commented on August 27, 2024
Hey, glad you are enjoying it!
The EC2 instance is only given inbound access over SSH on purpose, as part of CloudGoat is figuring out a way to open that port on that instance, so you can access the web server.
It tries to simulate a scenario where a certain port is white-listed to an IP that isn't yours, or potentially a webapp that is meant to be accessible from localhost only, but happens to be listening on 0.0.0.0.
SPOILER: Here is the solution to that particular case
- Use the EC2 permission ModifyInstanceAttribute to change the security group associated with the EC2 instance to `cloudgoat_ec2_debug_sg` or `cloudgoat_lb_sg`.I'm going to close this for now, but let me know/re-open if you have any other questions!
from cloudgoat.
Related Issues (20)
- vulnerable_lambda cheat sheet not up to date HOT 2
- Unable to create S3 bucket ACL for cloud_breach_s3 scenario (The bucket does not allow ACLs) HOT 4
- Deployment (rds.tf) and user "calrissianInfo" permission issue - codebuild_secrets HOT 3
- cicd : ssm connection and scenario deletion HOT 4
- detection_evasion : ssm connection and git clone issue HOT 4
- Problem creating ec2 instance on ecs_takeover HOT 1
- CICD: FIX HOT 1
- Installing requirements error. HOT 4
- ecs_takeover creation fail >>> FIX HOT 6
- cicd
- Docker Build Issue: Pip Install Error
- Duplicate resource in IAM policy
- Problem creating ec2 instance on cloud_breach_s3 HOT 10
- Trying getting it to work under Windows with Zero Luck
- Cloudgoat Missing Versioning
- ecs_takeover setup error HOT 2
- glue_privesc setup error HOT 1
- Using AWS cloudGoat with aws-vault HOT 3
- Terraform not found when running CloudGoat on Kali Linux HOT 5
- Error deploying ec2_takeover senario HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cloudgoat.