Responsible Disclosure: Abandoned Buckets and Billing Emails
By @edent
· CyberSecurity o2 Responsible Disclosure telefonica · 1 comment · 450 words · read ~371 times.
A few weeks ago, I received a billing email from my phone provider O21. While glancing at it, I noticed all the images were broken. Viewing the source of the email showed that they were all coming from http:// mcsaatchi-email-preview.s3.amazonaws.com/o2/... What happens if we visit that domain? Ah, the dreaded "The specified bucket does not […]
Continue reading →