Cloud OSINT. Finding Interesting Resources

Locating sensitive information, personally identifiable information PII and questionable assets in the cloud. TL; DR I had a curiosity driven excursion into the public clouds of AWS and Azure to find what is publicly hosted and who by. As anticipated, the results were extremely broad and...

[SECURITY] Fedora 36 Update: mass3-0-0.6.20200627gite1d5f1a.fc36

Quickly enumerate through a pre-compiled list of AWS S3 buckets using DNS instead of HTTP with a list of DNS resolvers and multi-threading...

Full Read Server-Side Request Forgery (SSRF)

🔒️ Requirements Privileges: None. 📝 Description The avatarUrl post parameter from /api/users.update and /api/teams.update api endpoint isn't sanitize and permit to get a full read SSRF exploitation. When updating user's or team's avatar, even if from client side we can only change it by uploading...

How to Monitor Athena Usage to Understand Your Operations, and Control Security and Costs

Introduction to our data lakes experience Data lakes are great. They are flexible as they allow many object formats and multiple query engines. They are also cost effective - there is no need to manage or pay for resources like disks, cpu and memory. Data is simply stored in an object store and i...

awsEnum - Enumerate AWS Cloud Resources Based On Provided Credential

Enumrate AWS services! with no nosies awsEnum is a python script enumrate AWS services through the provided credential. ▄▄▄▄▄▄ ▄ ▄ ▄▄▄▄▄▄▄ ▄▄▄▄▄▄▄ ▄▄ ▄ ▄▄ ▄▄ ▄▄ ▄▄ █ █ █ ▄ █ █ █ █ █ █ █ █ █ █ █▄█ █ █ ▄ █ ██ ██ █ ▄▄▄▄▄█ ▄▄▄█ █▄█ █ █ █ █ █ █ █▄█ █ █ █▄▄▄▄▄█ █▄▄▄█ █ █▄█ █ █ █ █ █▄▄▄▄▄ █ ▄▄▄█ ▄ █ █ █...

Virtuozzo Hybrid Infrastructure 5.1 Update 1 (5.1.1-61)

This update provides bug fixes and improvements. Vulnerability id: VSTOR-54473 The network orchestration service does not restart after an update. Vulnerability id: VSTOR-54265 Fixes the root cause of the alert "Cluster had blocked or slow replication." Vulnerability id: VSTOR-54066 Fixes the...

Malicious code in amazon-s3-find-and-forget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbd98702f102af95fe423652401d4b74a3f550cd99ad34ffad5f9a4e47659cce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-958 Malicious code in amazon-s3-find-and-forget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dbd98702f102af95fe423652401d4b74a3f550cd99ad34ffad5f9a4e47659cce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-957 Malicious code in amazon-s3-data-replication-hub-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4ca6ae6edf3790eb5efb9ad36e153e033bf826c074090d9d9cb473b1c56b5d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6322 Malicious code in strapi-provider-upload-aws-s3-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1d24b53a4fdd8c047f1239905fddd51ae8f1cb40bc6e5de7f014a3c4d9595aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-775 Malicious code in @xvideos/s3-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a23a427c52f449fa64bd06d2107d218f396709944e981766cf79ae7ac36174c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-774 Malicious code in @xvideos/s3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c55cadc9ebed48b9c7996b906aa6225abe4165ad24861e32268e0469e50d76d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1538 Malicious code in bfx-facs-store-s3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f752a171d7c81b56f1e48c10586aa6ed8fad191576ce196e4593ebde43615d5b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bfx-facs-grc-s3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cfcf4ec66cbefa85f2c259a3d914576dc423f2569c6a432be4ad3c4e41ae949 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1525 Malicious code in bfx-facs-grc-s3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5cfcf4ec66cbefa85f2c259a3d914576dc423f2569c6a432be4ad3c4e41ae949 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in vagrant-s3-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95fdb622795c0f71d0fe9c1606e85995be5d8e5c7e1f8ab6fb05385be0324375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6887 Malicious code in vagrant-s3-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 95fdb622795c0f71d0fe9c1606e85995be5d8e5c7e1f8ab6fb05385be0324375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

HackerOne: Stored XSS on www.hackerone.com due to deleted S3-bucket from old page_widget

A stored XSS vulnerability was found on www.hackerone.com due to a deleted S3-bucket from an old pagewidget. An attacker could claim the bucket and run JavaScript on the website, potentially allowing them to steal user data or perform actions on behalf of the user. The vulnerability was reported ...

CVE-2022-24840

django-s3file is a lightweight file upload input for Django and Amazon S3 . In versions prior to 5.5.1 it was possible to traverse the entire AWS S3 bucket and in most cases to access or delete files. If the AWSLOCATION setting was set, traversal was limited to that location only. The issue was...

Cross site scripting

django-s3file is a lightweight file upload input for Django and Amazon S3 . In versions prior to 5.5.1 it was possible to traverse the entire AWS S3 bucket and in most cases to access or delete files. If the AWSLOCATION setting was set, traversal was limited to that location only. The issue was...