~/home ./writeups ./bounties ./digest ./news ./about ./contact

~/home ./writeups ./digest ./news ./bounties ./about ./contact

Nimbus - HTB Machine Writeup

Difficulty: Hard | OS: Linux | Status: Completed

Exploit a reflected SSRF to steal AWS IAM credentials from the instance metadata service, inject a malicious YAML job into SQS for RCE on the worker, then escape to the host via a privileged CodeBuild container and kernel core_pattern hijack.

Tags: SSRF, AWS IAM / Cloud Exploitation, Container Escape

[ LOADING MACHINE DATA... ]

_

ONLINE

Privacy Policy Terms of Service

© 2026 0xJerry. All rights reserved.

|Built in the shadows///

Nimbus - HTB Writeup | 0xJerry's Lab