goGetBucket

goGetBucket - AWS S3 Bucket discovery through alterations and permutations Warning: code is horrible as I have only used this for personal use. When I get the time I will make it less-horrible and faster. When performing a recon on a domain - understanding assets they own is very important. AWS S...

s3-account-search

S3 Account Search This tool lets you find the account id an S3 bucket belongs too. For this to work you need to have at least one of these permissions: Permission to download a known file from the bucket s3:getObject. Permission to list the contents of the bucket s3:ListBucket. Additionally, you...

sandcastle

Inspired by a conversation with Instacart's @nickelser on HackerOne, I've optimised and published Sandcastle – a Python script for AWS S3 bucket enumeration, formerly known as bucketCrawler. The script takes a target's name as the stem argument e.g. shopify and iterates through a file of bucket...

gospider

GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO install GO111MODULE=on go install github.com/jaeles-project/gospider@latest Docker...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

s3-leaks

s3-leaks List of AWS S3 Leaks Feel free to send in a PR if you know of other leaks Date| Description| Notes ---|---|--- April 2025| Thoughts of AWS Access key ID's from an S3 bucket| The keys to the AWS kingdom March 2025| 16,000 subscribers to Nine newspapers from Australia| name, postal address...

htb-facts

HTB — Facts Easy/Linux - Season 10 Summary Facts is an Easy Linux machine that requires exploiting a known vulnerability CVE-2025-2304 in Camaleon CMS to extract local AWS S3 credentials. Enumerating the internal S3 buckets reveals an SSH private key that must be cracked using John the Ripper to...

CLEANSTART-2026-QY44641 vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2

CVE-2020-8912 affects multiple packages. A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. See references for individual vulnerability details...

CLEANSTART-2026-KS01329 padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2

CVE-2020-8911 affects multiple packages. A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. See references for individual vulnerability details...

CVE-2025-2825

CVE-2025-2825 - CrushFTP WebInterface Authentication bypass CVE-2025-2825 PoC This script exploits the CrushFTP authentication bypass vulnerability in versions: 10.0.0 10.8.3 11.0.0 11.3.0 How It Works CrushFTP's AWS S3-style authentication can be bypassed using: A fake but valid-looking...

bucket-brute

bucket-brute Aws S3 Tko Tool usage: bucket-brute.py -h -u URL -p PROXY -b BUCKET optional arguments: -h, --help show this help message and exit -u URL, --url URL No Such Bucket URL -p PROXY, --proxy PROXY Proxy for debugging -b BUCKET, --bucket BUCKET Bucket Name Example Creating mytest in region...

CLEANSTART-2026-IW34002 vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2

CVE-2020-8912 affects multiple packages. A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. See references for individual vulnerability details...

CLEANSTART-2026-LR02236 padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2

Security vulnerability affects the grafana package. A padding oracle vulnerability exists in the AWS S3 Crypto SDK for GoLang versions prior to V2...

org.apache.camel.kafkaconnector:camel-aws-s3-event-based-source-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:camel-aws-s3-sink-kafka-connector (4.22.0) +10 more potentially affected by CVE-2026-95664 via org.apache.camel:camel-aws2-s3 (>=4.19.0, <=4.22.1)

org.apache.camel:camel-aws2-s3 MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0, =4.19.0, =4.22.1 Source cves: CVE-2026-95664 Source advisory: SNYK:JAVA-ORGAPACHECAMEL-21816703...

org.apache.camel.kafkaconnector:camel-aws-s3-event-based-source-kafka-connector (4.22.0), org.apache.camel.kafkaconnector:camel-aws-s3-sink-kafka-connector (4.22.0) +10 more potentially affected by CVE-2026-95664 via org.apache.camel:camel-aws2-s3 (>=4.19.0, <=4.22.1)

org.apache.camel:camel-aws2-s3 MAVEN version =4.19.0, =3.35.0, =3.35.0, =3.35.0, =3.39.0, =4.19.0, =4.22.1 Source cves: CVE-2026-95664 Source advisory: MEND:CVE-2026-95664...

CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, crossplane-provider-aws-kinesis, crossplane-provider-aws-lambda, crossplane-provider-aws-elasticache, kubevela, crossplane-provider-keycloak, crossplane-provider-aws-dynamodb, grafana, crossplane-provider-aws-route53,...

CVE-2026-100353 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, crossplane-provider-aws-kinesis, crossplane-provider-aws-lambda, crossplane-provider-aws-elasticache, kubevela, crossplane-provider-keycloak, timoni, crossplane-provider-aws-dynamodb, grafana, crossplane-provider-aws-route53,...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, crossplane-provider-aws-kinesis, crossplane-provider-aws-lambda, crossplane-provider-aws-elasticache, kubevela, crossplane-provider-keycloak, crossplane-provider-aws-dynamodb, grafana, crossplane-provider-aws-route53,...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, crossplane-provider-aws-kinesis, crossplane-provider-aws-lambda, crossplane-provider-aws-elasticache, kubevela, crossplane-provider-keycloak, crossplane-provider-aws-dynamodb, grafana, crossplane-provider-aws-route53,...

CVE-2026-100354 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ec2, crossplane-provider-aws-kinesis, crossplane-provider-aws-lambda, crossplane-provider-aws-elasticache, kubevela, crossplane-provider-keycloak, timoni, crossplane-provider-aws-dynamodb, grafana, crossplane-provider-aws-route53,...