Subdomain takeover amazon S3

Photo by Christian Wiediger on Unsplash

In this article the following will be covered/explained:

What is amazon S3?Prerequisites for S3 subdomain takeoverHow to perform subdomain takeover on amazon S3Challenge (Test what you read on a test subdomain I own)

Amazon S3
Amazon S3 is a service provided by amazon to store data, It is also possible to host a static website on S3, which makes it possible for hackers to perform subdomain takeovers and use it to perform phishing attacks.

In 2020 Microsoft forgot about several subdomains, malicious actors managed to take over 4 of them and advertise Indonesian casinos there. This shows the impact a subdomain takeover can have, the issue was fixed quickly by microsoft. But if you want you can check out the waybackmachine and see the advertisements that were temporarliy hosted on these subdomains in 2020. The subdomains were:

portal.ds.microsoft.comperfect10.microsoft.comies.global.microsoft.comblog-ambassadors.microsoft.com