Rhino Security Labs

Strategic Blog

Technical Strategic Technical & Strategic Both
Research

CloudGoat Official Walkthrough Series: ‘sqs_flag_shop’

John De Armas

CloudGoat is Rhino Security Labs’s tool for deploying “vulnerable by design” AWS infrastructure. This blog post will walk through one of the newest CloudGoat scenarios, sqs_flag_shop. where you will attempt to move through an AWS…

Read more
Research

CloudGoat: New Scenario and Walkthrough (sns_secrets)

Cloud Security

CloudGoat Official Walkthrough Series: ‘glue_privesc’

Technical Strategic Technical & Strategic Both
Categories
Clear Selection
Application Security
AWS
Azure
Buyer's Guide
Cloud Security
Compliance
Enterprise Security
GCP
Mobile Security
Network Security
News
Penetration Testing
Research
Social Engineering
Tool Development
Research

Vestaboard: Exploring Broken Access Controls and Privilege Escalation

Tyler Ramsbey

During research on the Vestaboard web platform, the Rhino research team identified three instances of Broken Access Controls.

Read-Access to other Vestaboards. 
Ability to update names of other users. 
Privilege escalation from Admin to…

Read more