Found an exposed IP via Shodan and identified open ports using Naabu, leading to further investigation.Discovered admin email leakage and internal app details through brute forcing directories.Downloaded and Decompiled an APK that uncovered hardcoded AWS credentials, enabling unauthorized access to S3 buckets.Part 9: Protection Measures for AWS Keys.