Encrypted Data Walkthrough

Challenge Statment#

Solution#

Firstly, we configure our AWS CLI.

Then we can check the given S3 bucket. It contains a file, which we can download and view.

Now, we have a ciphertext, a key ID, and an algorithm type, but we do not have the permissions to decrypt it.
Looking at other IAM roles, we find this role called crypto-master.

We can try to assume the role temporarily using AWS STS.

Now, we can use the AccessKeyId, SecretAccessKey, and SessionToken to configure the AWS CLI.
We can now use AWS KMS to decrypt the CipherText.

Adapted from harishkannan05/THM-HackfinityBattle-Writeup under MIT.