🚀 Join our AI Wargame at Black Hat Asia and our Workshop + Wargame at NDC Sydney .

Valid Accounts: Cloud Accounts

The attacker uses valid credentials obtained through the reset token to access user accounts.

Metadata

  • Severity: medium
  • Slug: valid-accounts-cloud-accounts

MITRE

  • T1098.001: Account Manipulation: Additional Cloud Credentials
  • T1078.004: Valid Accounts: Cloud Accounts
  • T1070.003: Indicator Removal: Clear Command History

Available Labs

Select a language to explore available labs for this vulnerability.

No matching labs found

Try adjusting your language filter.

Try it yourself

Find, Hack and Fix Your First Vulnerability

Reading about security bugs is one thing — fixing one is how the skill sticks. Play a free challenge from the wargame, no setup required.