You're reading from AWS Penetration Testing Beginner's guide to hacking AWS with tools such as Kali Linux, Metasploit, and Nmap

Product type Paperback

Published in Dec 2020

Publisher Packt

ISBN-13 9781839216923

Length 330 pages

Edition 1st Edition

Languages

Tools

AWS

Concepts

Cloud Security

Author (1):

Jonathan Helmus

View More author details

Table of Contents (17) Chapters

Preface

1. Section 1: Setting Up AWS and Pentesting Environments

2. Chapter 1: Building Your AWS Environment FREE CHAPTER

3. Chapter 2: Pentesting and Ethical Hacking

4. Section 2: Pentesting the Cloud – Exploiting AWS

5. Chapter 3: Exploring Pentesting and AWS

6. Chapter 4: Exploiting S3 Buckets

7. Chapter 5: Understanding Vulnerable RDS Services

8. Chapter 6: Setting Up and Pentesting AWS Aurora RDS

9. Chapter 7: Assessing and Pentesting Lambda Services

10. Chapter 8: Assessing AWS API Gateway

11. Chapter 9: Real-Life Pentesting with Metasploit and More!

12. Section 3: Lessons Learned – Report Writing, Staying within Scope, and Continued Learning

13. Chapter 10: Pentesting Best Practices

14. Chapter 11: Staying Out of Trouble

15. Chapter 12: Other Projects with AWS

16. Other Books You May Enjoy

Leave a review - let other readers know what you think

Scripts to find private buckets

Scripting is a highly sought-after skill when it comes to cybersecurity because having the knowledge and ability to script tasks allows you to automate and provide results at a much more efficient rate while also executing another task. Scripting is also a great way to solve problems that may be unique – in this case, finding buckets that may not have a common name. Buckets can only have one unique name and no bucket is the same, so having a dictionary list of known buckets won't assist you directly. What that means is you'll need to make a modified version of the bucket names and place those in a text file that can be used to discover bucket names.

Now that we have a vast amount of knowledge on S3, let's take a look at a couple of scripts that you could use on your next pentest engagement. We will look at two popular languages: Python and Bash.