intro to cloud hacking (leaky buckets)
Source: YouTube · NetworkChuck · published Jul 10, 2023 · 26:02
The video demonstrates ethical hacking techniques targeting AWS S3 cloud storage buckets, showing how common misconfigurations create security vulnerabilities 0:23. The presenter emphasizes these techniques should only be used with explicit permission and ethically 0:11.
Key Takeaways:
• AWS S3 buckets are frequently misconfigured, creating "leaky buckets" that expose sensitive data - a problem affecting major companies like Verizon and Time Warner Cable 1:21
• Using NS lookup and AWS CLI, hackers can identify S3 buckets and potentially access their contents if improperly secured 8:59
• Old AWS configurations allowing "any authenticated AWS user" access are particularly dangerous, as they grant access to anyone with AWS credentials 15:14
The video walks viewers through practical S3 security challenges using flaws.cloud to demonstrate real-world exploitation techniques that companies should protect against 7:12.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
In this video, you're going to
hack the cloud. I'm gonna show you. And what you'll learn is that
it's actually not that hard, which is kind of scary if I'm being
honest. And speaking of scary, you don't be scary because disclaimer, I'm actually gonna be showing you real
hacking techniques and they should only be used ethically, which will always involve explicit
permission and following all the rules. That being said, the targets and methods I demonstrate
in this video are ethical. So let's proceed. Here's our
mission, our target, aws, the largest cloud provider in the world. And also where the internet kind of lives, they have this thing called s3 or
the simple storage Service Service. It's just storage. So think
external hard drive or Google Drive, except it's where companies put their
s…