S3 Bucket Misconfiguration

once all done:—>->->->

Allows for full anonymous access (most easy to find and exploit )
Allows for arbitrary file listing
Allows for arbitrary file upload and exposure
Allows for blind uploads
Allows arbitrary read/writes of objects
S3 bucket reveals ACP/ACL

(Referred from other blog)

Command for listing items:

aws s3 ls s3://bucket name

Listing files

Sometimes you might get some access denied message so try this

If you get any access denied message try this it might work sometimes

We might get access denied message many time while listing the files but we might able to copy, move, delete files

Access denied when listing

Coping file to the bucket

aws s3 cp yourfile s3://bucketname/yourfile

I uploaded a simple txt file which was successful

removing file from the bucket

aws s3 rm s3://bucketname/yourfile

The file was removed

Moving file

aws s3 mv yourfile s3://bucketname/yourfile

The file was moved from my system to the storage

You can contact me via

https://www.linkedin.com/in/sudharshan-r-74954b191/

Thank you guys for reading my blog. If you like my blog you can share with your friends.