misc · insane · 800 pts
Acme runs a public image-preview service on EC2. Their flag is somewhere in their cloud. Chain together: SSRF → IMDS → S3 → KMS. --- ### Run locally ```bash cd content/aysec/AYSEC-CTF docker compose up cloud-kill-chain ``` Then open `http://localhost:8000` and start solving.