16 matches found
bucky
Bucky An S3 account ID enumeration and bucket discovery tool Given a single accessible S3 bucket, bucky extracts the 12-digit AWS account ID that owns it, then discovers additional buckets belonging to the same account by fuzzing bucket names against a wordlist — all in one command. What It Does ...
s3enum
s3enum s3enum is a fast and stealthy Amazon S3 bucket enumeration tool. It leverages DNS instead of HTTP, which means that requests are not logged in S3 server access logs. It was originally built back in 2016 to target GitHub. Installation root@kitploit: go install github.com/koenrh/s3enum@lates...
GCPBucketBrute
GCPBucketBrute A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated. This script optionally accepts GCP user/service account credentials and a keyword. Then, a list of permutations will be generated from that keywor...
sandcastle
Inspired by a conversation with Instacart's @nickelser on HackerOne, I've optimised and published Sandcastle – a Python script for AWS S3 bucket enumeration, formerly known as bucketCrawler. The script takes a target's name as the stem argument e.g. shopify and iterates through a file of bucket...
goGetBucket
goGetBucket - 通过变更和排列发现 AWS S3 存储桶 警告：代码很糟糕，因为我只将其用于个人用途。等我有时间，我会让它不那么糟糕（并且更快）。 在对域进行侦察时，了解其拥有的资产非常重要。AWS S3 存储桶权限一次又一次地被混淆，从而导致敏感材料暴露。 这个工具的作用是使用我在漏洞赏金和渗透测试期间识别出的常见模式来枚举 S3 存储桶名称。它支持使用自定义词表对根域名进行排列。我强烈推荐 AltDNS 中打包的词表。 关于找到的每个存储桶，将返回以下信息： 列表权限 写入权限 存储桶所在区域 存储桶是否已禁用所有访问 Installation root@kitploit...
s3enum
s3enum s3enum 是一个快速且隐秘的 Amazon S3 存储桶枚举工具。它利用 DNS 而非 HTTP，这意味着请求不会被记录在 S3 服务器访问日志中。 它最初于 2016 年构建，用于 针对 GitHub 的漏洞赏金狩猎。 安装 root@kitploit: go install github.com/koenrh/s3enum@latest 用法 你需要指定目标的基础名称（例如 hackerone）、一个单词列表和一个后缀列表。候选存储桶名称通过将目标名称与每个单词组合（使用 -、、...
mass3
Quickly enumerate through a pre-compiled list of AWS S3 buckets using DNS instead of HTTP with a list of DNS resolvers and multi-threading. Warning: Be aware that this is really shitty golang code. I wrote it without any prior knowledge of Go Lang but it seems to do the job. Feel free to contribu...
AWSBucketDump
AWSBucketDump AWSBucketDump is a tool to quickly enumerate AWS S3 buckets to look for loot. It's similar to a subdomain bruteforcer but is made specifically for S3 buckets and also has some extra features that allow you to grep for delicious files as well as download interesting files if you're n...
slurp-1
slurp 黑盒/白盒 S3 存储桶枚举器 概述 感谢所有使此工具成为可能的供应商软件包。 这是一个安全工具；专为渗透测试人员和安全专业人员设计，用于审计 S3 存储桶。 功能 通过域名进行扫描；您可以针对单个域名或域名列表 通过关键词进行扫描；您可以针对单个关键词或关键词列表 通过 AWS 凭证进行扫描；您可以针对自己的 AWS 账户查看哪些存储桶已暴露 彩色输出，便于可视化 grep 目前每个域名和关键词生成超过 28,000 种排列组合（感谢 @jakewarren 和 @random-robbie） Punycode 支持国际化域名 强版权保护许可证（GPLv3） 模式...
slurp-old
slurp 手动或通过 certstream 枚举 S3 存储桶 概述 首先，感谢 https://github.com/eth0izzle/bucket-stream 提供的 certstream 思路。 同样，感谢所有使此工具成为可能的供应商软件包。 不对您如何使用此工具负责。 模式 Certstream 域名 关键词 特性 使用 Go 编写： 比 Python 更快。 没有依赖地狱和版本锁定（例如 Python 3 和 requirements.txt 等）；更易于部署、静态二进制等。 更好的并发性。 支持国际化域名的 Punycode（S3...
GO-2026-6329 SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets in github.com/seaweedfs/seaweedfs
SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets in github.com/seaweedfs/seaweedfs...
EUVD-2026-42286
SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets...
GHSA-HGPF-8634-G44C SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets
Summary SeaweedFS routes requests signed with SigV4 service s3tables to the S3Tables management API. Authorization on that path collapsed account-less S3 identities into the shared admin account and failed open, so a user holding only ordinary S3 Read credentials — and no S3Tables-specific...
GCPBucketBrute - A Script To Enumerate Google Storage Buckets, Determine What Access You Have To Them, And Determine If They Can Be Privilege Escalated
A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated. This script optionally accepts GCP user/service account credentials and a keyword. Then, a list of permutations will be generated from that keyword which will th...
Amazon Web Services S3 instance enumeration
Provided AWS credentials, this module will call the authenticated API of Amazon Web Services to list all S3 buckets associated with the account This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'aws-sdk-s3' clas...
