 |
Post Avf1X3M6uEVZtzryts by [email protected] |
 |
More posts by [email protected] |
|
Post #AvYafEDoWh9AD0u49Y by [email protected] |
|
0 likes, 1 repeats |
|
|
|
Some info on #AWS #S3 presigned URLs. They're used often when you want to g… |
|
|
|
Post #AvYap5jqvCounJamQ4 by [email protected] |
|
0 likes, 1 repeats |
|
|
|
That URL contains everything you need to fetch the object. Whoever has that URL… |
|
|
|
Post #AvYbMzwywsIIgjtwiO by [email protected] |
|
0 likes, 1 repeats |
|
|
|
If you know how these things work, I haven't told you anything new or usefu… |
|
|
|
Post #AvYbmoWQ3tKglymq5Q by [email protected] |
|
0 likes, 1 repeats |
|
|
|
If you made some kind of intercepting HTTP/HTTPS proxy (thinking of a #penteste… |
|
|
|
Post #AvYdvm9QRhNdvzQsng by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@paco Put that link in any email that ends up in somebody’s Outlook and Micro… |
|
|
|
Post #AvYdvmFo3yU6FmPykK by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@fubaroque That's really an interesting point. I don't think emails use… |
|
|
|
Post #Avf1X3M6uEVZtzryts by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@paco If you're MitM, you can harvest the cookies and impersonate the princ… |
|
|
|
Post #Avf1X3SUWVc2Dmr4qW by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@StompyRobot Yes, but you've missed an important point. If I, the bad guy/p… |
|
|
|
Post #Avf1X3XoCjrkUHLK8O by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@pacoThat sounds like an observability challenge with S3!I know other object st… |
