AWSBucketDump

AWSBucketDump AWSBucketDump is a tool to quickly enumerate AWS S3 buckets to look for loot. It's similar to a subdomain bruteforcer but is made specifically for S3 buckets and also has some extra features that allow you to grep for delicious files as well as download interesting files if you're n...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

S3Scanner

S3Scanner A quick and dirty script to find unsecured S3 buckets and dump their contents 💧 Using The tool has 2 parts: 1 - s3finder.py This script takes a list of domain names and checks if they're hosted on Amazon S3. Found S3 domains are output to file with their corresponding region in format...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

s3-leaks

s3-leaks Lista de fugas de AWS S3 No dudes en enviar un PR si conoces otras fugas...

bucket-stream

🚨 Bucket Stream 已不再维护。如果您需要红队行动的支持或咨询，请发送邮件至 [email protected] 🚨 Bucket Stream 通过监控证书透明度日志发现有趣的 Amazon S3 存储桶。 该工具仅监听各种证书透明度日志（通过 certstream），并尝试从证书域名的排列中寻找公开的 S3 存储桶。 请负责任地使用。 我创建此工具主要是为了强调公开 S3 存储桶相关的风险，并为常规的字典攻击提供不同的思路。如果您使用 S3 存储桶，以下是一些快速提示： 1. 随机化您的存储桶名称！没有必要使用...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

flumberboozle

flumberboozle Suite of programs meant to aid in bug hunting and security assessments Why this weird name? Just because I heard it first here so I thought this meaningless word would be fitting name of a repository I don't know what I'm going to do with. Contents This repository contains scripts...

S3Scanner

S3Scanner Features - Usage - Quick Start - Installation - Discuss A tool to find open S3 buckets in AWS or other cloud providers: AWS DigitalOcean DreamHost GCP Linode Scaleway Custom Features ⚡️ Multi-threaded scanning 🔭 Supports many built-in S3 storage providers or custom 🕵️‍♀️ Scans all...

mass3

Quickly enumerate through a pre-compiled list of AWS S3 buckets using DNS instead of HTTP with a list of DNS resolvers and multi-threading. Warning: Be aware that this is really shitty golang code. I wrote it without any prior knowledge of Go Lang but it seems to do the job. Feel free to contribu...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

gospider

GoSpider GoSpider - 用Go编写的快速网络爬虫 无需痛苦地将Gospider集成到你的侦察工作流中？ 该项目是Osmedeus引擎的一部分。查看它在@OsmedeusEngine上的集成方式 安装 GO安装 root@kitploit: GO111MODULE=on go install github.com/jaeles-project/gospider@latest Docker root@kitploit: 克隆仓库 git clone https://github.com/jaeles-project/gospider.git 构建容器 docker build...

sandcastle

Inspired by a conversation with Instacart's @nickelser on HackerOne, I've optimised and published Sandcastle – a Python script for AWS S3 bucket enumeration, formerly known as bucketCrawler. The script takes a target's name as the stem argument e.g. shopify and iterates through a file of bucket...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

festin

FestIN——强大的S3存储桶发现与内容探测工具 什么是FestIn 为什么选择FestIn 安装 使用Python 使用Docker 完整选项 用法 配置搜索域名 并发 HTTP爬取配置 管理结果 代理使用 DNS选项 全文搜索支持 作为服务运行（监控模式） 示例：结合FestIn与DnsRecon 步骤1 - 使用所需选项对目标域名运行dnsrecon并保存输出 步骤2 - 准备上一步生成的文件以供FestIn使用 步骤3 - 使用所需选项运行FestIn并保存输出 -...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

sss3

SSS3 Simple Storage Scanner SSS3 is a simple S3 Bucket testing software. It uses aws cli to search for public buckets in a list of domains/subdomains. Basic Requirements It requires aws cli installed and configured with a s3 policy defined You should have a list of previous enumerated...

slurp-1

slurp Enumerador de buckets S3 blackbox/whitebox Resumen Agradecimientos a todos los paquetes de proveedores que hicieron posible esta herramienta. Esta es una herramienta de seguridad; está destinada a pentesters y profesionales de seguridad para realizar auditorías de buckets S3. Característica...

slurp-old

slurp Enumera buckets de S3 manualmente o mediante certstream Resumen En primer lugar, crédito a https://github.com/eth0izzle/bucket-stream por la idea de certstream. También, crédito a todos los paquetes de proveedores que hicieron posible esta herramienta. No soy responsable de cómo uses esta...