hacksudo/hacksudos3cloud repository overview

🐳 Hacksudo S3 CTF Lab

A lightweight Docker-based vulnerable AWS S3 lab for learning cloud security and S3 misconfigurations.

This image uses LocalStack to simulate a real-world S3 bucket with:

• Public read/write access
• Bucket listing enabled
• Website defacement scenario
• Hidden CTF flag for practice

No real AWS account required – 100% local and safe.

⁠🚀 Quick Start

docker-compose up

Access endpoint:

http://localhost:4566

or

 sudo docker run -d -p 4566:4566 --name hacksudo-s3 hacksudo/hacksudos3cloud

⁠🎯 Learning Goals

• S3 enumeration
• Exploiting misconfigured bucket policies
• Uploading files to public buckets
• Extracting sensitive data