Nimbus

---

Table of Contents

1. Environment Setup
2. Reconnaissance
3. Web Application Enumeration
4. SSRF Discovery & Exploitation
5. IMDS Credential Theft (IP Filter Bypass)
6. AWS Enumeration with Stolen Credentials
7. SQS Job Injection & YAML Deserialization RCE
8. Container Escape via CodeBuild + core_pattern
9. Full Automation - nimbus.py Explained
10. Complete Exploit Script - nimbus.py
11. Flags
12. Attack Chain Summary
13. Lessons Learned & Mitigations

---

---

🔒

Premium Content

The full exploitation walkthrough, privilege escalation, and flags are available exclusively for members.

Unlock Full Writeup →