How not to implement AWS S3 signed URLs? $25,000 bounty

[@BugBountyReportsExplained]

Welcome to the comment section! I hope you enjoyed the video.
Sign up for my mailing list to receive the BBRE newsletter to get the best hacking info delivered right to your inbox: mailing.bugbountyexplained.com/

[@monKeman495]

Came after your recent finding so here it is all started 😂😂watching again after long time

[@BugBountyReportsExplained]

Yeah, it's almost exactly the same

[@renganathanofficial]

haha same here!

[@dhruvkandpal9909]

Love your content and meticulous explanation! 👏🏻👏🏻👏🏻 Keep posting such amazing videos!

[@test-vf3iv]

nice video man really enjoyed watching it and a very easy explaination

[@_DeProgrammer]

Love these videos! Thanks.

[@jaeger809]

I hope i can do this. Thanks

[@ahmadshami5847]

my goodness that bug is so cool yet it looks so random. did the hunter mention any thing about luck involved or did he use a certain methodology.

[@BugBountyReportsExplained]

unfortunately this aspect was not mentioned in the blogpost😕 I'd love to hear that too

[@000t9]

Hello
Is this vulnerability disclosed 2 years ago as I saw in this video?

[@BugBountyReportsExplained]

yes, but cloud-related topics are only more and more popular

[@000t9]

@@BugBountyReportsExplained Thank you!

[@cybersecurity3523]

Good bro

[@tekken-pakistan2718]

04:04 Thanks!

[@hamzabettache497]

any chance with "GET /api/aws/getSignedImageUrl?objectName=316923.jpg&contentType=image%2Fjpeg" ?

[@BugBountyReportsExplained]

yeah, definitely test the objectName parameter. Also, there's a chance for header injection using the contentType param

[@hamzabettache497]

@@BugBountyReportsExplained thanks, how to exploit the content type and header ?

[@BugBountyReportsExplained]

@@hamzabettache497 use %0d%0a characters. You'll find more by googling CRLF injection

[@dzakialthalsyah]

❤

[@hamzakhaled1144]

dsa

[@hamzakhaled1144]

TEST

[@sameersh.5647]

one day i am gonna hack google because of this guy

[@BugBountyReportsExplained]

I hope you will! good luck!

[@pmohan67]

I am beginner of bug finding
How I find bug using tools
Tell any tool name to finding
How know the bug is there
How check the bug status securely
Make an video about
How find bug
How verify it
How report it
Pls
Make an video
👆
👆
👆
👆

[@BugBountyReportsExplained]

My every video is about this I think.