Join the Hack Smarter community: https://hacksmarter.org
--- This is from a series of working through the full "Attacking & Defending AWS" Learning Path on TryHackMe. This is a B2B exclusive path, and I have received permission from TryHackMe to live stream all of the content.

In this video, I work through the "Lambda - Data Exfiltration" challenge room. This consists of the following:
- Performing reconnaissance of S3 Buckets
- Performing reconnaissance of Lambda Functions
- Downloading and analyzing Lambda Functions
- Exfiltrating credentials with RCE via insecure Python code
- Compromising an overly privileged Lambda Function to read the secret data

Enjoy!
--------------
Rhino Security Labs Discord: https://discord.gg/z68UQyUD
Work Smarter Discord: https://discord.gg/work-smarter-956006303061393428
Twitch: https://hacksmarter.live/