flAWS
Exploit AWS misconfigurations to find each next level
flAWS is a series of levels about common mistakes when using Amazon Web Services. Each level is a sub-domain, and you find the next one by exploiting an AWS misconfiguration, starting with S3 buckets. There is no SQL injection or buffer overflow here, only issues specific to AWS.
Free · No login · Browser · Beginner
About flAWS
It trains cloud security thinking for developers and security people who work with AWS. Each level starts by explaining how to avoid the mistake from the level before, so you learn both attack and defense.
It is free and runs in the browser. Hints teach you how to find what you need, and if you do not want to run any commands, you can just follow the hints to the end.
On Breakpoint since 23 Oct 2026.