flaws2.cloud (Level 2)

Level 2(http://level2-g9785tw8478k4awxtbox9kk3c5ka8iiz.flaws2.cloud/)

a) We start with a web application running inside a container @ http://container.target.flaws2.cloud/ which requires us to authenticate with a username and password which we don’t possess.

We have been provided an ecr (Elastic Container Registry) name- level2

b) Listing out images in the registry with our creds from level 1.

c) We have permission to get login password for ecr-

We found this in Level 1

aws --profile test --region us-east-1  ecr get-login-password
aws --profile test --region us-east-1  ecr get-login-password | docker login --username AWS --password-stdin 653711331788.dkr.ecr.us-east-1.amazonaws.com

d) Logging into the remote registry using this token and listing out images-

aws --profile test…