PhishRoot / Products
Cloud
Yuna Kim · Security Researcher
PhishRoot Cloud
Transcript
PhishRoot Cloud reviews imported resources for public exposure, encryption, audit logging and access permissions.
Yuna Kim · Security Researcher
Cloud walkthrough
Transcript
PhishRoot Cloud reviews imported resources for public exposure, encryption, audit logging and access permissions. This is the real PhishRoot Cloud page. Everything shown uses a labeled demo or synthetic files. It is not live cloud monitoring. Cloud checks resource snapshots for public exposure, encryption at rest, audit logging, and wildcard administrator permissions. Demo runs two built-in sample buckets, marked not saved. The public bucket fails three checks. The private bucket passes. Template downloads a CSV with the expected import columns. Choose file takes CSV or JSON. This synthetic CSV flags a critical wildcard administrator role. A synthetic JSON file previews the same way. While signed out, nothing is saved. Findings, Assets, and Activity hold saved organization records, with status, owners, and CSV export. Here, they're empty. For a live check of a public domain, open the domain scanner. The off-camera narration uses a different synthetic voice from the presenter. Saving, owner assignment and exporting are described, not performed.
Import assets
Assets
0
Open
0
Resolved
0
No findings.
Open domain scanner