Publicly accessible code repositories (GitHub, GitLab, Bitbucket, etc.) frequently leak API keys, service account credentials, private keys, or other secrets embedded in source code, configuration files, CI/CD pipelines, or commit histories. These secrets can provide direct access to cloud resources (storage blobs, databases, management APIs) and are therefore one of the most effective public sources for compromising cloud infrastructure.
Why the other options are less effective as public sources:
A. Sensitive documents on a public cloud — if truly public, they may contain useful info, but sensitive documents are typically not intentionally left public; repositories with keys are a more common accidental exposure.
B. Open ports on the cloud infrastructure — helpful for attack surface analysis, but open ports alone don’t directly provide credentials or cloud-management access.
D. SSL certificates on websites — useful for host identification and fingerprinting, but rarely give direct access to cloud management.
CompTIA PT0-003 Mapping: Information gathering and open-source intelligence (OSINT) techniques to discover credentials and secrets that enable cloud compromise.
