Pentest AWS Subscription Checker
Budget: $250 – $750 USD
Dear all,
this should be a BugBounty Program.
The first who can tamper the Subscription Management Solution, provided in the link below, will get rewarded a fee of 500 USD.
Git-Repo: https://github.com/michael-ullrich-1010/terraform-aws-subscription-checker
Steps:
- Provision the repo to your AWS Account (Lambda with minimal permission will be provisioned)
- Execute the Lambda
- Subscription Token will be pulled from our backend and stored in the env-vars of the Lambda
Your Task: Attack the subscription mechanism to alter the subscription.
Acceptance criteria:
- Subscription must be tampered/faked to be valid. Currently, the subscription is expired.
- Python code in Lambda (except main.py) must be unveiled
- Description/explanation of your steps
If you would like more clarification, please feel free to contact me.
Regards
Michael
this should be a BugBounty Program.
The first who can tamper the Subscription Management Solution, provided in the link below, will get rewarded a fee of 500 USD.
Git-Repo: https://github.com/michael-ullrich-1010/terraform-aws-subscription-checker
Steps:
- Provision the repo to your AWS Account (Lambda with minimal permission will be provisioned)
- Execute the Lambda
- Subscription Token will be pulled from our backend and stored in the env-vars of the Lambda
Your Task: Attack the subscription mechanism to alter the subscription.
Acceptance criteria:
- Subscription must be tampered/faked to be valid. Currently, the subscription is expired.
- Python code in Lambda (except main.py) must be unveiled
- Description/explanation of your steps
If you would like more clarification, please feel free to contact me.
Regards
Michael