3 ms·
S3 buckets have a single unified namespace, so presumably he's got bots running 24/7 scanning every legal bucket name. Filter it down using english words, likel
by skywhopper 9y ago
S3 buckets have a single unified namespace, so presumably he's got bots running 24/7 scanning every legal bucket name. Filter it down using english words, likely ops jargon, and company names. I'm guessing Accenture has lots of buckets named "accenture-prod-uploads" or other promising combinations.
- graystevens 9y agoYup, they must have (except for one region in AWS), a DNS compliant and completely unique name. So it’s just a case of dns bruteforce, working through wordlists and common phrases/words to try and spot them. I ran something very similar for a couple of months, and found >200,000 valid S3 buckets, a large portion of which had permissions issues (public list etc).
- numbsafari 9y ago... and this is why I generally prefix all bucket names with a UUID. Mildly user hostile, but bucket names go in config files, so who cares?
- ams6110 9y agoAnd if he's doing it, others are too. There's a very high likelihood that all this data has been compromised.