offensive-terraform / terraform-aws-s3-subdomain-takeover Goto Github PK
View Code? Open in Web Editor NEWOffensive Terraform module which takes over a subdomain which has a CNAME record pointing to non-existing S3 bucket in target's Route53. The module creates a S3 bucket with a name as subdomain in the specific AWS region that CNAME record is pointing to. Also, it uploads a simple web page with "404 Page Not Found" text.
License: Apache License 2.0