ORP APK Bot
From Exploitee.rs
Revision as of 01:29, 29 May 2022 by Zenofex (talk | contribs) (Created page with "== About == The Discord bot "ORP_APK" iterates through applications in the Google Play store looking for instances of insecure cloud storage, open real time databases, and private keys. After manual verification of the finding, a user can then report the finding to the affected app developer through the use of bot commands. == Services == * Amazon AWS S3 Buckets * Linode Objects Buckets * Digital Ocean Spaces * DreamHost Buckets * Azure Blobs * BackBlaze S3 * IBM Clo...")
About
The Discord bot "ORP_APK" iterates through applications in the Google Play store looking for instances of insecure cloud storage, open real time databases, and private keys. After manual verification of the finding, a user can then report the finding to the affected app developer through the use of bot commands.
Services
- Amazon AWS S3 Buckets
- Linode Objects Buckets
- Digital Ocean Spaces
- DreamHost Buckets
- Azure Blobs
- BackBlaze S3
- IBM Cloud Buckets
- Wasabi Object Buckets
- Vultr Objects Buckets
- FireBase Database
- Google Cloud Buckets
- RSA Private Keys
- AWS Creds
Usage
- !start
- !scan <app_id>
- !get_findings <app_id>
- !update_notified <finding_id_num>
- !get_email <finding_id_num> <researcher_name>
- !add_note <Not to application developer here>
- !cancel_email
- !send_email
