Episode 200: Cloud Hacking w/ Nick Copi

Episode 200: In this episode of Critical Thinking - Bug Bounty Podcast JD sits down with Nick Copi to pick his brain about Cloud Hacking. They talk through what actually qualifies and the cloud, threat models, and how providers can use and misuse cloud services.

Follow us on twitter at: https://x.com/ctbbpodcast

Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io

Shoutout to YTCracker for the awesome intro music!

====== Links ======

Follow your hosts Rhynorater, rez0 and gr3pme on X:

https://x.com/Rhynorater

https://x.com/rez0__

https://x.com/gr3pme

Critical Research Lab:

https://lab.ctbb.show/

Need a Pentest? We just launched CTBB Pentests!

https://pentest.ctbb.show/

Hack full time? Check out the Full-Time Hunter’s Guild!

https://ctbb.show/fthg

====== Ways to Support CTBBPodcast ======

Hop on the CTBB Discord at https://ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

You can also find some hacker swag at https://ctbb.show/merch!

Check out Justin’s Dojo on Yes We Hack!

https://www.criticalthinkingpodcast.io/ywh-dojo

Today’s Guest:

https://x.com/7urb01

====== Resources ======

Content-Type Override to Stored XSS on Public Objects

https://blog.voorivex.team/content-type-override-to-stored-xss-on-public-objects

====== Timestamps ======

(00:00:00) Introduction

(00:03:16) Client-side Cloud Service Bug

(00:13:38) Cloud Provider Dashboards

(00:24:08) Larger Cloud Threat Model

(00:37:33) Approach to Hacking Providers that use the Cloud

(00:59:53) Identity Services & S3 Buckets