S3 Bucket Recon: Finding Exposed AWS Buckets Like a Pro!
Автор: 𝙇𝙤𝙨𝙩𝙨𝙚𝙘
Загружено: 2025-02-26
Просмотров: 19184
IF you Enjoyed the video, don't forget to Like 👍, Subscribe, and turn on the Notification Bell 🔔 to stay updated!
Table of Contents
1. Understanding AWS S3 Buckets
2. Manual Methods for Identifying S3 Buckets
3. Google Dorking for AWS S3 Buckets
4. Automating Google Dorking with DorkEye
5. Using S3Misconfig tool for Fast Bucket Enumeration
6. Finding S3 Buckets with HTTPX and Nuclei
7. Extracting S3 URLs from JavaScript Files
8. Using java2s3 tool to finding s3 urls in js files
9. Brute-Forcing S3 Bucket Names with LazyS3
10. Using Cewl + S3Scanner to find open buckets
11. Extracting S3 Buckets from GitHub Repositories
12. Websites for Public S3 Bucket Discovery
13. Finding Hidden S3 URLs with Extensions
14. AWS S3 Bucket Listing & File Management:
15. Exploiting Misconfigured Buckets
16. Securing S3 Buckets for companies
🎭 WHO AM I ?
I'm Coffinxp, a hacker & Security Researcher and aspiring Cybersecurity Specialist and Bug Hunter. With a strong passion for technology and expertise in malware analysis, vulnerability assessment, and bug hunting, my goal is to safeguard digital assets and contribute to a more secure online community..
🐞 If you want to learn bug bounty hunting follow me on medium app: / coffinxp
☕ If you want to support me, you can buy me a coffee: https://www.buymeacoffee.com/coffinxp
🍿 WATCH NEXT METHODOLOGY
1️⃣How to Access 404 files of any server • How to Access 404 files of any server | In...
2️⃣JavaScript Recon Masterclass: Turn Bugs into Big Rewards • JavaScript Recon Masterclass: Turn Bugs in...
3️⃣The Best XSS Methodology for Bug Bounty Hunters • The Best XSS Methodology for Bug Bounty Hu...
4️⃣Mastering Origin IP Discovery Behind WAF | 11+ method • Mastering Origin IP Discovery Behind WAF |...
5️⃣How to approach a target in Bug bounty programs • How to approach a target in Bug bounty pro...
🧑💻MY OTHER SOCIALS:
🌟Github - github.com/coffinxp
🌟Twitter - @coffinxp7
🌟Website - lostsec.xyz
🌟Medium - coffinxp.medium.com
Thank you from the bottom of my heart for your incredible love and support! ❤️ You’re the reason this journey is so special! 🌟🙏
Disclaimer ⚠️
Hacking without permission is illegal.This channel is strictly educational for learning about cyber-security in the areas of ethical hacking and penetration testing & bug hunting.Our goal is to empower the community with knowledge to protect themselves against malicious activities.All content,including videos and tutorials, is created with prior permission from the relevant programs and owners.By engaging with our content,you acknowledge that you will use the information solely for educational and defensive purposes..
#cybersecurity #bugbounty #ethicalhacking #webapp #infosec
Music from #InAudio: https://inaudio.org/
Track Name: Ghost_Abstract_Electronic__Synthwave_remix__by_Alexi_Action___teefnbl
Доступные форматы для скачивания:
Скачать видео mp4
-
Информация по загрузке: