• AWS provides the ability for clients to store a lot of data using a service called Simple Storage Service(S3)
• Files are stored on what are called buckets and these buckets can have insecure permissions:
  • List objects: user with permissions can list the files in the bucket
  • Write objects: user with permissions can add/remove files on the bucket
  • Read bucket permissions: users with permissions can read files on the bucket
  • Write bucket permissions: users with permissions can edit files on the bucket

Enumeration

The first part of enumerating s3 buckets is having an s3 bucket name. How would you find an s3 bucket name:

• Source code on git repositories
• Analysing requests on web pages
  • Some pages retrieve static resbucketnameources from s3 buckets
• Domain name of product names:
  • If a product or domain is called “servicename” then the s3 bucket may also be called “servicename”

Check Bucket using url

bucketname.s3.amazonaws.com

To access them on their region

bucketname.region-name.amazonaws.com

If the bucket is not accessible, you would get a similar image