Compare commits

...

2 Commits

Author SHA1 Message Date
Stefan Etringer 0fc077dfa6 bump 2023-02-22 18:10:58 +01:00
Stefan Etringer ce52b5aa9d bump 2023-02-21 21:18:14 +01:00
2 changed files with 20 additions and 0 deletions

View File

@ -4,6 +4,7 @@
* [Regions](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-available-segions) * [Regions](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-available-segions)
* `--region` * `--region`
### Simple Storage Service (S3) ### Simple Storage Service (S3)
* [S3](https://aws.amazon.com/s3/) * [S3](https://aws.amazon.com/s3/)
* Methods of access control are as follows * Methods of access control are as follows
@ -29,10 +30,12 @@ aws s3 cp s3://<bucketname>/foo_public.xml . --no-sign-request
``` ```
#### ACL #### ACL
* `Anyone`, just `curl` * `Anyone`, just `curl`
* `AuthenticatedUsers`, `s3` cli with aws key * `AuthenticatedUsers`, `s3` cli with aws key
## IAM ## IAM
* Not necessarily used by s3 * Not necessarily used by s3
* Access key ID, starts with `AKIA` + 20 chars * Access key ID, starts with `AKIA` + 20 chars
* Secret access key * Secret access key
@ -82,3 +85,10 @@ aws secretsmanager list-secrets
ws secretsmanager get-secret-value --secret-id <Name> --region <region> ws secretsmanager get-secret-value --secret-id <Name> --region <region>
``` ```
## Check Permissions on S3 Bucket
* Do a `PUT` method to see if the bucket may be writeable to upload a file via
```sh
curl -vvv -X PUT $BUCKET_URL --data "Test of write permissions"
```

View File

@ -1,8 +1,18 @@
# Binary Exploitation References # Binary Exploitation References
## Assembler ## Assembler
* [Online x86/x64 assembler](https://defuse.ca/online-x86-assembler.htm) * [Online x86/x64 assembler](https://defuse.ca/online-x86-assembler.htm)
## Syscalls ## Syscalls
* https://filippo.io/linux-syscall-table/
* http://asm.sourceforge.net/intro/hello.html * http://asm.sourceforge.net/intro/hello.html
* https://github.com/paolostivanin/syscall-table-32bit.git
* https://syscalls32.paolostivanin.com/
## Tools
* [pwninit](https://github.com/io12/pwninit.git)