whx
/
killchain-compendium
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Compare commits

base: whx:0fc077dfa651df22c107c2a2f37e872c70887078
Branches Tags
whx:master
..
compare: whx:ca53f6bcb98f62a3d7e11971bbf57dad8f7aaed2
Branches Tags
whx:master

No commits in common. "0fc077dfa651df22c107c2a2f37e872c70887078" and "ca53f6bcb98f62a3d7e11971bbf57dad8f7aaed2" have entirely different histories.
0fc077dfa6 ... ca53f6bcb9

2 changed files with 0 additions and 20 deletions
Show Stats Expand all files Collapse all files

10
Enumeration/AWS.md
View File

@ -4,7 +4,6 @@
* [Regions](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-available-segions) * [Regions](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-available-segions)
* `--region` * `--region`
### Simple Storage Service (S3) ### Simple Storage Service (S3)
* [S3](https://aws.amazon.com/s3/) * [S3](https://aws.amazon.com/s3/)
* Methods of access control are as follows * Methods of access control are as follows
@ -30,12 +29,10 @@ aws s3 cp s3://<bucketname>/foo_public.xml . --no-sign-request
``` ```
#### ACL #### ACL
* `Anyone`, just `curl` * `Anyone`, just `curl`
* `AuthenticatedUsers`, `s3` cli with aws key * `AuthenticatedUsers`, `s3` cli with aws key
## IAM ## IAM
* Not necessarily used by s3 * Not necessarily used by s3
* Access key ID, starts with `AKIA` + 20 chars * Access key ID, starts with `AKIA` + 20 chars
* Secret access key * Secret access key
@ -85,10 +82,3 @@ aws secretsmanager list-secrets
ws secretsmanager get-secret-value --secret-id <Name> --region <region> ws secretsmanager get-secret-value --secret-id <Name> --region <region>
``` ```
## Check Permissions on S3 Bucket
* Do a `PUT` method to see if the bucket may be writeable to upload a file via
```sh
curl -vvv -X PUT $BUCKET_URL --data "Test of write permissions"
```

10
Exploits/Binaries/References.md
View File

@ -1,18 +1,8 @@
# Binary Exploitation References # Binary Exploitation References
## Assembler ## Assembler
* [Online x86/x64 assembler](https://defuse.ca/online-x86-assembler.htm) * [Online x86/x64 assembler](https://defuse.ca/online-x86-assembler.htm)
## Syscalls ## Syscalls
* https://filippo.io/linux-syscall-table/
* http://asm.sourceforge.net/intro/hello.html * http://asm.sourceforge.net/intro/hello.html
* https://github.com/paolostivanin/syscall-table-32bit.git
* https://syscalls32.paolostivanin.com/
## Tools
* [pwninit](https://github.com/io12/pwninit.git)