AWS - SNS Unauthenticated Enum

Reading time: 1 minute

tip

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

SNS

For more information about SNS check:

AWS - SNS Enum

Open to All

When you configure a SNS topic from the web console it's possible to indicate that Everyone can publish and subscribe to the topic:

So if you find the ARN of topics inside the account (or brute forcing potential names for topics) you can check if you can publish or subscribe to them.

tip

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks