3 ms·
What does the OP's "S3 detection" mean in this context? I'm not clear how the list of vulnerable domains was collected in this instance - presumably he had to
by dotBen 5y ago
What does the OP's "S3 detection" mean in this context?
I'm not clear how the list of vulnerable domains was collected in this instance - presumably he had to know which domains to create buckets for?
- kolp 5y agoPresumably he's scanning DNS records looking for subdomains (A or CNAME records) pointing to S3 buckets. Script then checks to see if these buckets exist and outputs a list of subdomains where the bucket doesn't exist. At least that's my understanding of his process.