[monalisa]

it's simple;

have you heard of google dorking before?
it's easy and it's free. you can just identify open amazon s3 boxes with google and other search engines and now you have all the data you can eat at your fingertips. the difficult part is exfiltrating it without getting caught i guess but start with the dorking first and work your way up from there.

[zaniityyyyyyyyyyyy]

it's simple;

have you heard of google dorking before?
it's easy and it's free. you can just identify open amazon s3 boxes with google and other search engines and now you have all the data you can eat at your fingertips. the difficult part is exfiltrating it without getting caught i guess but start with the dorking first and work your way up from there.

yeah i'm familiar with google dorking and s3 buckets along with websites like grayhatwarfare, i just don't know how to use keywords

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.

[monalisa]

search for vulnerability, exploit vulnerability (while using proper anonymization software). the exploit database has a dedicated section for google hacking, so you can literally search for queries that output vulnerable systems without doing any brain work whatsoever

[nonameokie]

Most people breach by phishing. They get the creds. They steal logs. OR They might even install a keylogger or some kind of a trojan in system memory. Easy to capture the keystrokes and get the creds. After getting the creds it's all downloading .csv files.