White box/functional pentesting Aurora
Just as we did before with RDS, we are going to look and see what we can find out about Aurora from a pentesting point of view. We know the environment since we set it up, but for the sake of the next exercise, let's say we are pentesting an Aurora instance. This test involves looking at whether the instance is accessible by the public, how strong the password field is, and anything else we may be able to do while looking at the instance.
The reason we want to do this is to expose the white box pentesting methodology in as many cases as possible. White box pentesting is the most common pentesting methodology because it allows pentesters to fully pentest everything for both functional purposes and compliance purposes. We are going to apply this to our Aurora instance.
Our engagement starts off with scanning the Aurora instance. Remember, we don't know anything except the address of the instance!
