Enumerating Cloud File Storage Gems: Discovering Exposed Data Across S3, Azure, & GCP
Michael Wylie details automated reconnaissance techniques to discover unauthenticated AWS S3 buckets, Azure Blob containers, and GCP storage leaks.
Summary
The Risk of Unintentional Cloud Data Exposure
As enterprises migrate terabytes of internal documents and database backups to cloud object storage, misconfigured permissions frequently expose sensitive files publicly.
Automated Cloud Bucket Reconnaissance Techniques
Michael Wylie explains keyword generation heuristics, DNS permutations, and multi-cloud enumeration toolchains for finding target storage assets.
Searching Across AWS S3, Azure Blobs, and Google Cloud Storage
The author demonstrates verifying bucket ACLs, listing object keys, and searching through exposed file repositories for API credentials and PII.
Defensive Remediation and Continuous Storage Auditing
The presentation provides cloud administrators with policy enforcement templates (S3 Block Public Access, Azure Private Endpoints) and continuous monitoring scripts.
Related talks
Cloud Village·27 min
Felipe Pr0teus
Felipe Pr0teus shares automated OSINT and scanning techniques to discover exposed AWS cloud assets, including public RDS database snapshots and SQS queues.
Red Team Village·38 min
Vandana Verma Sehgal
Vandana Verma Sehgal explores Zero Trust architectures, examining identity verification, micro-segmentation, and offensive testing in modern cloud environments.
Red Team Village·52 min
Ryan Ekins
Ryan Ekins demonstrates leveraging cloud-hosted Jupyter notebooks, large datasets, and serverless pipelines to automate offensive reconnaissance and analysis.