Compare commits
2 Commits
ca53f6bcb9
...
0fc077dfa6
Author | SHA1 | Date |
---|---|---|
|
0fc077dfa6 | |
|
ce52b5aa9d |
|
@ -4,6 +4,7 @@
|
|||
|
||||
* [Regions](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-available-segions)
|
||||
* `--region`
|
||||
|
||||
### Simple Storage Service (S3)
|
||||
* [S3](https://aws.amazon.com/s3/)
|
||||
* Methods of access control are as follows
|
||||
|
@ -29,10 +30,12 @@ aws s3 cp s3://<bucketname>/foo_public.xml . --no-sign-request
|
|||
```
|
||||
|
||||
#### ACL
|
||||
|
||||
* `Anyone`, just `curl`
|
||||
* `AuthenticatedUsers`, `s3` cli with aws key
|
||||
|
||||
## IAM
|
||||
|
||||
* Not necessarily used by s3
|
||||
* Access key ID, starts with `AKIA` + 20 chars
|
||||
* Secret access key
|
||||
|
@ -82,3 +85,10 @@ aws secretsmanager list-secrets
|
|||
ws secretsmanager get-secret-value --secret-id <Name> --region <region>
|
||||
```
|
||||
|
||||
## Check Permissions on S3 Bucket
|
||||
|
||||
* Do a `PUT` method to see if the bucket may be writeable to upload a file via
|
||||
```sh
|
||||
curl -vvv -X PUT $BUCKET_URL --data "Test of write permissions"
|
||||
```
|
||||
|
||||
|
|
|
@ -1,8 +1,18 @@
|
|||
# Binary Exploitation References
|
||||
|
||||
## Assembler
|
||||
|
||||
* [Online x86/x64 assembler](https://defuse.ca/online-x86-assembler.htm)
|
||||
|
||||
## Syscalls
|
||||
|
||||
* https://filippo.io/linux-syscall-table/
|
||||
* http://asm.sourceforge.net/intro/hello.html
|
||||
* https://github.com/paolostivanin/syscall-table-32bit.git
|
||||
* https://syscalls32.paolostivanin.com/
|
||||
|
||||
## Tools
|
||||
|
||||
* [pwninit](https://github.com/io12/pwninit.git)
|
||||
|
||||
|
||||
|
|
Loading…
Reference in New Issue