AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access

Attributed metadata history

Up to 100 retained publisher events per page for 59b7f382fc3c8417ed13dc7fa10869e91cf3b4ecbd153ae148ef72dd398319e4. Withdrawals and unavailable references remain attributed to their publishers.

intelligence_src_c25d91fa3ad9ae9ac7

observed · 2026-10-12 14:53:03 UTC

One area that I have encountered quite often over the years is that during recon phase of a bug bounty hunt or pentest a set of AWS access keys are being discovered. Let’s say you found 50 AWS access keys by drooling and hunting through public Github repos and using other nifty tricks and means. How do you go about checking their validity? And what do they have access to and provide the Bug Bounty Program or Blue Team the dates, times, and IP address when those keys were used?

Fingerprint: 3ef424b01fb40c8926dc2701f42d8f1506638e253bdef464fa12921841976415

intelligence_src_c25d91fa3ad9ae9ac7

observed · 2026-10-12 14:53:03 UTC

available

Fingerprint: 0a2f1bebc7ea800736eafab237a0ddecfb8797a02d23951e8aa80935e2f3446f