Publicly Readable Storage Bucket

Bucket Wisp

A bucket meant to serve a logo and a product PDF to the public web is, by that same setting, readable by absolutely anyone — including folders nobody meant to publish. Ask it for a listing with no credentials at all and see how much of the company's internal housekeeping it hands back. Target: s3://stratus-freight-assets

Try: aws s3 ls s3://stratus-freight-assets --no-sign-request
hunter@exploitia↑↓ history · ctrl+L clear
Target briefing loaded. Try: aws s3 ls s3://stratus-freight-assets --no-sign-request
$