Finding Amazon S3 Buckets in the Wild
Introduction Amazon Simple Storage Service (Amazon S3) is an object storage service used by a lot of companies to store data of various different types in a container called a bucket. These data range from the company’s logo to Personally identifiable information of the users. Developers sometimes don’t configure the buckets correctly and make them available for public use. In this blog I’ll show you:
How to find buckets How to exploit them How to find buckets belonging to a company Google Dorking When you google something, google generally shows you a lot of results that are generally sorted in the most viewed order.