Callback-url-file-3a-2f-2f-2fhome-2f-2a-2f.aws-2fcredentials

~/.aws/credentials (AWS Access Key ID and Secret Access Key).

The research was presented at and DEF CON 31 by security researchers including Liv Matan and Shachar Menashe from JFrog. Core Concepts of the Paper callback-url-file-3A-2F-2F-2Fhome-2F-2A-2F.aws-2Fcredentials

When combined, this payload attempts to trick a web application into reading the (which contains aws_access_key_id and aws_secret_access_key ) and sending the contents back to the attacker via a "callback" mechanism. How the Attack Works callback-url-file-3A-2F-2F-2Fhome-2F-2A-2F.aws-2Fcredentials

The payload targets a common vulnerability where an application accepts a "callback URL" but fails to restrict the protocol to callback-url= callback-url-file-3A-2F-2F-2Fhome-2F-2A-2F.aws-2Fcredentials