Description: In this video, we will look at how to write to test if our Amazon S3 bucket has any publicly readable files in it.
All the links, code samples etc. are available on our Hack of the Day blog:
http://hackoftheday.securitytube.net/2013/04/finding-publicly-readable-files-in-your.html
Please do leave your comments and recommendations behind
Tags: hod , amazon s3 , boto , python ,
Disclaimer: We are a infosec video aggregator and this video is linked from an external website. The original author may be different from the user re-posting/linking it here. Please do not assume the authors to be same without verifying.
Good video . . has me a bit worries about some of cooperate practices today... I know tons of people that use this product..
PS. I saw the white house down trailer with your wireless sniffer code in the move . That is really amazing to know not only did they try to use real code in a movie it was yours. Does this make your code a movie star?
hey Movie Star :) I started python 2 days ago and still learning . Easy to write, its amazing. And please more support about security programming area for us. Thank you for everything.. And i wish u'd be a MOVIE STAR! instead your codes :)
Good day Vivek,
Amazing video like ALWAYS! I really admire and appreciate your effort. I am planning to get into programming language since I hardly know one. Will PHP a good point to start with?
Many thanks and good wishes. Looking forward to see more of your phenomenal videos.
*Thumbs up*
I don't want to answer for Vivek, but I if I can give my 2 cents ;).IMHO I'd say PHP is good to know if you're are going to understand some aspects of sql injection (of course knowing mysql :)) or most of the rootkits I've seen were on webpages written in PHP. In the end, it depends on what kind of infosec person you want to be. Don't learn PHP if you want to reverse engineer applications. Of course, I just want to just give a humble answer to someone looking one :). I love this website! It is truly good for anyone serious in security. Here is a website just to learn PHP if you'd like.
http://thenewboston.org/tutorials.php
I hope it helps.
Cheers!
@ApertureSecurity
Thanks for the advice. To be honest, I don't know really how I am gonna step in the programming world since I am a telecom person and about to finish masters in computer forensics. On rootkits and reverse engineering, you mentioned will definitely help me to decide which way I wanna go.
Thanks for the link and I appreciate your time and help!