S3

General information about AWS S3

URL Format

S3 utilizes a global namespace which means each bucket name must be unique. Additionally, buckets can be accessed via a URL which means the DNS entry must be unique.

• https://[bucketName].s3.amazonaws.com

• https://s3-[region].amazonaws.com/[OrgName]

Identify Region

S3 buckets reside and store data in a particular region. We can discover the region in a few ways.

• nslookup https://tyler123kjdf.s3.amazonaws.com

• curl -I [bucketName].s3.amazonaws.com

---

Offensive Security Tactics & Techniques

Data Poisoning - Bedrock Knowledge Base | Tech with Tylerwww.techwithtyler.dev

Enumeration

Enumerate AWS Organization ID | Tech with Tylerwww.techwithtyler.dev

Enumerate AWS Account IDs | Tech with Tylerwww.techwithtyler.dev

Privilege Escalation

S3 | Tech with Tylerwww.techwithtyler.dev