🚀 Join our AI Wargame at Black Hat Asia and our Workshop + Wargame at NDC Sydney .

Sign InContact sales
Sign InContact sales

Valid Accounts: Cloud Accounts

The attacker uses valid credentials obtained through the reset token to access user accounts.

Metadata

  • Severity: medium
  • Slug: valid-accounts-cloud-accounts

MITRE

  • T1098.001: Account Manipulation: Additional Cloud Credentials
  • T1078.004: Valid Accounts: Cloud Accounts
  • T1070.003: Indicator Removal: Clear Command History

Available Labs

Open Python labs in SecDim Play for this vulnerability.

Try it yourself

Find, Hack and Fix Your First Vulnerability

Reading about security bugs is one thing — fixing one is how the skill sticks. Play a free challenge from the wargame, no setup required.

Try a Challenge

Training for your team? Book a demo â†’