Compare commits
2 Commits
ca53f6bcb9
...
0fc077dfa6
Author | SHA1 | Date |
---|---|---|
|
0fc077dfa6 | |
|
ce52b5aa9d |
|
@ -4,6 +4,7 @@
|
||||||
|
|
||||||
* [Regions](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-available-segions)
|
* [Regions](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-available-segions)
|
||||||
* `--region`
|
* `--region`
|
||||||
|
|
||||||
### Simple Storage Service (S3)
|
### Simple Storage Service (S3)
|
||||||
* [S3](https://aws.amazon.com/s3/)
|
* [S3](https://aws.amazon.com/s3/)
|
||||||
* Methods of access control are as follows
|
* Methods of access control are as follows
|
||||||
|
@ -29,10 +30,12 @@ aws s3 cp s3://<bucketname>/foo_public.xml . --no-sign-request
|
||||||
```
|
```
|
||||||
|
|
||||||
#### ACL
|
#### ACL
|
||||||
|
|
||||||
* `Anyone`, just `curl`
|
* `Anyone`, just `curl`
|
||||||
* `AuthenticatedUsers`, `s3` cli with aws key
|
* `AuthenticatedUsers`, `s3` cli with aws key
|
||||||
|
|
||||||
## IAM
|
## IAM
|
||||||
|
|
||||||
* Not necessarily used by s3
|
* Not necessarily used by s3
|
||||||
* Access key ID, starts with `AKIA` + 20 chars
|
* Access key ID, starts with `AKIA` + 20 chars
|
||||||
* Secret access key
|
* Secret access key
|
||||||
|
@ -82,3 +85,10 @@ aws secretsmanager list-secrets
|
||||||
ws secretsmanager get-secret-value --secret-id <Name> --region <region>
|
ws secretsmanager get-secret-value --secret-id <Name> --region <region>
|
||||||
```
|
```
|
||||||
|
|
||||||
|
## Check Permissions on S3 Bucket
|
||||||
|
|
||||||
|
* Do a `PUT` method to see if the bucket may be writeable to upload a file via
|
||||||
|
```sh
|
||||||
|
curl -vvv -X PUT $BUCKET_URL --data "Test of write permissions"
|
||||||
|
```
|
||||||
|
|
||||||
|
|
|
@ -1,8 +1,18 @@
|
||||||
# Binary Exploitation References
|
# Binary Exploitation References
|
||||||
|
|
||||||
## Assembler
|
## Assembler
|
||||||
|
|
||||||
* [Online x86/x64 assembler](https://defuse.ca/online-x86-assembler.htm)
|
* [Online x86/x64 assembler](https://defuse.ca/online-x86-assembler.htm)
|
||||||
|
|
||||||
## Syscalls
|
## Syscalls
|
||||||
|
|
||||||
|
* https://filippo.io/linux-syscall-table/
|
||||||
* http://asm.sourceforge.net/intro/hello.html
|
* http://asm.sourceforge.net/intro/hello.html
|
||||||
|
* https://github.com/paolostivanin/syscall-table-32bit.git
|
||||||
|
* https://syscalls32.paolostivanin.com/
|
||||||
|
|
||||||
|
## Tools
|
||||||
|
|
||||||
|
* [pwninit](https://github.com/io12/pwninit.git)
|
||||||
|
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue