hxxps://7793fgpqri.execute-api.us-east-1.amazonaws[.]com/prod/vulnerable/get-dataURL
Reported by 1 independent source · first reported by GuidePoint Security · last reported
Last reported 1 month ago
What the reports say
1 report, newest first · the exact sentence from each-
Serverless, Not Riskless: Exploiting Unauthenticated API Gateways in AWS“All exploitation happens through plain HTTP requests to the public, unauthenticated endpoint at hxxps://7793fgpqri.execute-api.us-east-1.amazonaws[.]com/prod/vulnerable/get-data.”
Indicators reported together
named in the same reports- hxxps://prod-tasks.s3.us-east-1.amazonaws[.]com/snapshots/in 1 report
- prod-tasks.s3.us-east-1.amazonaws[.]comin 1 report
- 7793fgpqri.execute-api.us-east-1.amazonaws[.]comin 1 report
Copy these 3 indicators · defanged
Thanks — we review every report.