Skip to content

Latest commit

 

History

History

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 
 
 
 
 

README.md

Description

English | 中文

This is a script that can help you quickly build a bucket arbitrary file overwrite scene

Deployment environment

cd /TerraformGoat/aws/s3/unrestricted_file_upload/

Configure AWS Access Credentials

aws configure

You can see the access key in the AWS [Console --> Security Credentials]

terraform init
terraform apply

Exploit

Access to the storage bucket we built

image-20220426122407418

image-20220426122453542

We can upload any file on this bucket

image-20220426143627488

image-20220426143639149

Destruction Challenge

terraform destroy

Just type yes and wait for it be destroyed