#!/bin/bash aws configure set region us-west-1 echo =====4-1-A===== aws ec2 describe-instances \ --filters "Name=tag:Name,Values=xxe-server" \ --query "Reservations[].Instances[].{Name: Tags[?Key=='Name']|[0].Value, Type: InstanceType}" \ --output text echo =====4-2-A===== aws elbv2 describe-load-balancers \ --query "LoadBalancers[?contains(LoadBalancerName, 'xxe-alb')].[LoadBalancerName, Type]" \ --output text echo =====4-3-A===== aws wafv2 list-web-acls \ --scope REGIONAL \ --query "WebACLs[?Name=='xxe-waf'].Name" \ --output text echo =====4-4-A===== ENDPOINT=$(aws elbv2 describe-load-balancers \ --names xxe-alb \ --query "LoadBalancers[0].DNSName" \ --output text) curl -X POST http://$ENDPOINT/parse \ -H "Content-Type: application/x-www-form-urlencoded" \ --data-urlencode $'xml=\n\n testuser\n test@example.com\n' echo =====4-5-A===== ENDPOINT=$(aws elbv2 describe-load-balancers \ --names xxe-alb \ --query "LoadBalancers[0].DNSName" \ --output text) curl -X POST http://$ENDPOINT/parse \ -H "Content-Type: application/x-www-form-urlencoded" \ --data-urlencode $'xml=\n\n]>\n&xxe;' echo =====4-6-A===== ENDPOINT=$(aws elbv2 describe-load-balancers \ --names xxe-alb \ --query "LoadBalancers[0].DNSName" \ --output text) curl -X POST http://$ENDPOINT/parse \ -H "Content-Type: application/x-www-form-urlencoded" \ --data-urlencode $'xml=\n\n\n\n\n]>\n&lol3;' echo =====A-7-A===== ENDPOINT=$(aws elbv2 describe-load-balancers \ --names xxe-alb \ --query "LoadBalancers[0].DNSName" \ --output text) curl -X POST http://$ENDPOINT/parse \ -H "Content-Type: application/x-www-form-urlencoded" \ --data-urlencode $'xml=\n\n]>\n&xxe;'

Check List