search

Hacking-the-Cloud / hackingthe.cloud

An encyclopedia for offensive and defensive security knowledge in cloud native technologies.
https://hackingthe.cloud
Other
1.58k stars 203 forks source link

Account ID Operational Security Update #395

Closed mosesrenegade closed 2 months ago

mosesrenegade commented 2 months ago

There is an update to the note at the bottom of this page. While it appears that it's just GetBucket you need, when using the S3-Account-Finder tool unless you have [READ] ACL Access it appears that this tool will not enumerate anything. We used this file to discover this:

github.com/sa7mon/s3scanner@latest

If you run the tool with a bucket with GetBucket you will not get any ACLs but instead if you run the tool with the Public ACL you can now get the S3 Finder to use.