You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Add support for the amazon_s3_takeover test type to enable the "Amazon AWS S3 bucket takeover" vulnerability scan.
To run this test, it should be possible to use the following code snippet:
it('should not contain link to missing AWS S3 bucket',async()=>{awaitrunner.createScan({tests: [TestType.S3_TAKEOVER]}).timeout(timeout).run({method: 'GET',url: `${process.env.BROKEN_CRYSTALS_URL}`});});
If the page's body contains a link that points to a 404 resource with the following content:
Code: NoSuchBucket
Message: The specified bucket does not exist
BucketName: cdn.example.com
it indicates that there is a vulnerability.
Please see the following references for more information on this vulnerability:
Uh oh!
There was an error while loading. Please reload this page.
Add support for the
amazon_s3_takeover
test type to enable the "Amazon AWS S3 bucket takeover" vulnerability scan.To run this test, it should be possible to use the following code snippet:
If the page's body contains a link that points to a 404 resource with the following content:
it indicates that there is a vulnerability.
Please see the following references for more information on this vulnerability:
The text was updated successfully, but these errors were encountered: