Encontrar Fuga de Datos

Pasivo

Google dorks, censys, shodan:

Grayhatwarfaregrayhatwarfare.com

Hunting Azure Blobs Exposes Millions of Sensitive FilesCyberArk

Activo

<storageaccount>.files.core.windows.net
<storageaccount>.files.core.windows.net/<contenedor>
<storageaccount>.files.core.windows.net/<contenedor>/?comp=list

Herramientas

trufflehog

GitHub - trufflesecurity/trufflehog: Find, verify, and analyze leaked credentialsGitHub

DumpsterDiver

GitHub - securing/DumpsterDiver: Tool to search secrets in various filetypes.GitHub

BlobHunter

GitHub - cyberark/BlobHunter: Find exposed data in Azure with this public blob scannerGitHub

Recomendacion

Security recommendations for Blob storage - Azure StorageMicrosoftLearn