writeups.xyz / Bucket Monopoly: Breaching AWS Accounts Through Shadow Resources

Submitter : c2a

Date: 9 August 2024

Bounty : undisclosed

Vulnerabilities :

• Cloud
• RCE
• DoS
• Account Takeover
• Information Disclosure

Programs :

• AWS

Authors :

• Yakir Kadkoda
• Ofek Itach
• Michael Katchinskiy

Link :
https://www.aquasec.com/blog/bucket-monopoly-breaching-aws-accounts-through-shadow-resources/