Back to directory
WRITEUP #3572

Easy Bounty With Exposed Buckets & Blobs

CloudCloud storage misconfiguration
by@mrd0x(mr.d0x)
Bounty
1,450
Program
-
Published
Jul 26, 2021
Added to HackDex
Sep 15, 2022
Read Full Writeuphttps://mrd0x.com/easy-bounty-with-exposed-buckets-and-blobs/
RELATED WRITEUPS
The Hunt for ALBeast: A Technical Walkthrough
CloudAWS ALB
Addressed AWS defaults risks: OIDC, Terraform and Anonymous to AdministratorAccess
CloudOIDC
Double Agent: Exploiting Pass-through Authentication Credential Validation in Azure AD
CloudPrivilege escalation
Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources
CloudRCE
UnOAuthorized: Privilege Elevation Through Microsoft Applications
CloudPrivilege escalation

Built with ❤️ by Shubham Rawat