<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Cloud on Riga</title><link>https://riga.sh/tags/cloud/</link><description>Recent content in Cloud on Riga</description><generator>Hugo 0.125.0</generator><language>en-us</language><lastBuildDate>Mon, 01 Nov 2021 00:00:00 +0000</lastBuildDate><atom:link href="https://riga.sh/tags/cloud/index.xml" rel="self" type="application/rss+xml"/><item><title>[OSINT] Public buckets, everywhere</title><link>https://riga.sh/tutorials/buckets/</link><pubDate>Mon, 01 Nov 2021 00:00:00 +0000</pubDate><guid>https://riga.sh/tutorials/buckets/</guid><description>I endorse nothing you&amp;rsquo;ll do with these tools, use them at your own risks.
Buckets A bucket contains various types of data such as public files (static assets), but sometimes it&amp;rsquo;s used to store sensitive infos (logs, passwords&amp;hellip;). Permissions are critical with buckets, it can leverage an attacker to abuse unauthenticated access or improper ACL permissions. An open upload policy could let an attacker upload a malicious file, such as a custom payload.</description></item></channel></rss>