stratus-red-team icon indicating copy to clipboard operation
stratus-red-team copied to clipboard
verified publisher icon DataDog

New technique: Backdoor a Cloud Storage bucket via its bucket policy

Open xathrya opened this issue 10 months ago • 0 comments

What does this PR do?

  • add new technique: Backdoor a Cloud Storage bucket via its bucket policy

add external fictitious account as admin of a cloud storage bucket

Motivation

This technique is developed as part of Grab's purple teaming activity and we want to share it so more people can get the benefit.

Co-authored-by: Satria Ady Pradana [email protected]

xathrya avatar Mar 07 '25 10:03 xathrya