hacktricks/pentesting/pentesting-web/buckets/README.md

Buckets

A good tool to review your configuration in several clouds is: https://github.com/nccgroup/ScoutSuite

****AWS S3 hacking tricks****

More info:

• https://www.notsosecure.com/cloud-services-enumeration-aws-azure-and-gcp/
• https://www.notsosecure.com/exploiting-ssrf-in-aws-elastic-beanstalk/
• https://www.notsosecure.com/identifying-exploiting-leaked-azure-storage-keys/