slurp-old

slurp Enumerates S3 buckets manually or via certstream Overview First of all, credit to https://github.com/eth0izzle/bucket-stream for the certstream idea. Also, credit to all the vendor packages that made this tool possible. Not responsible for how you use this tool. Modes Certstream Domain...

tarnish

tarnish tarnish is a static-analysis tool to aid researchers in security reviews of Chrome extensions. It automates much of the regular grunt work and helps you quickly identify potential security vulnerabilities. This tool accompanies the research blog post which can be found here. If you don't...

s3enum

s3enum s3enum एक तेज़ और गुप्त Amazon S3 बकेट गणना उपकरण है। यह HTTP के बजाय DNS का उपयोग करता है, जिसका अर्थ है कि अनुरोध S3 सर्वर एक्सेस लॉग में लॉग नहीं किए जाते हैं। इसे मूल रूप से 2016 में GitHub को लक्षित करने के लिए बनाया गया था। स्थापना root@kitploit: go install...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

bucky

Bucky An S3 account ID enumeration and bucket discovery tool Given a single accessible S3 bucket, bucky extracts the 12-digit AWS account ID that owns it, then discovers additional buckets belonging to the same account by fuzzing bucket names against a wordlist — all in one command. What It Does ...

s3-leaks

s3-leaks List of AWS S3 Leaks Feel free to send in a PR if you know of other leaks...

sandcastle

Inspired by a conversation with Instacart's @nickelser on HackerOne, I've optimised and published Sandcastle – a Python script for AWS S3 bucket enumeration, formerly known as bucketCrawler. The script takes a target's name as the stem argument e.g. shopify and iterates through a file of bucket...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

aws-security-assessment-solution

Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...

S3Scanner

S3Scanner Features - Usage - Quick Start - Installation - Discuss A tool to find open S3 buckets in AWS or other cloud providers: AWS DigitalOcean DreamHost GCP Linode Scaleway Custom Features ⚡️ Multi-threaded scanning 🔭 Supports many built-in S3 storage providers or custom 🕵️‍♀️ Scans all...

festin

FestIN - शक्तिशाली S3 बकेट खोजक और सामग्री खोज FestIn क्या है Festin क्यों स्थापना Python का उपयोग करके Docker का उपयोग करके पूर्ण विकल्प उपयोग खोज डोमेन कॉन्फ़िगर करें समवर्तीता HTTP क्रॉलिंग कॉन्फ़िगरेशन परिणाम प्रबंधित करें प्रॉक्सी उपयोग DNS विकल्प पूर्ण पाठ समर्थन सेवा या वॉचिंग मोड के रूप...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

sss3

SSS3 Simple Storage Scanner SSS3 is a simple S3 Bucket testing software. It uses aws cli to search for public buckets in a list of domains/subdomains. Basic Requirements It requires aws cli installed and configured with a s3 policy defined You should have a list of previous enumerated...

AWSBucketDump

AWSBucketDump AWSBucketDump is a tool to quickly enumerate AWS S3 buckets to look for loot. It's similar to a subdomain bruteforcer but is made specifically for S3 buckets and also has some extra features that allow you to grep for delicious files as well as download interesting files if you're n...

botb

Break out the Box BOtB BOtB is a container analysis and exploitation tool designed to be used by pentesters and engineers while also being CI/CD friendly with common CI/CD technologies. What does it do? BOtB is a CLI tool which allows you to: Exploit common container vulnerabilities Perform commo...

S3Scanner

S3Scanner A quick and dirty script to find unsecured S3 buckets and dump their contents 💧 Using The tool has 2 parts: 1 - s3finder.py This script takes a list of domain names and checks if they're hosted on Amazon S3. Found S3 domains are output to file with their corresponding region in format...

mass3

DNS के बजाय DNS रिज़ॉल्वर और मल्टी-थ्रेडिंग की सूची का उपयोग करके AWS S3 बकेट की पूर्व-संकलित सूची को शीघ्रता से गणना करें। चेतावनी: ध्यान रखें कि यह वास्तव में घटिया गोलंग कोड है। मैंने इसे गो लैंग के किसी पूर्व ज्ञान के बिना लिखा है लेकिन यह काम करता प्रतीत होता है। टूल को बेहतर बनाने के लिए...

bucket-stream

🚨 لم يعد Bucket Stream قيد الصيانة. إذا كنت بحاجة إلى دعم أو استشارة لمشاريع الاختراق الأخلاقي red teaming، فأرسل لي بريدًا إلكترونيًا على [email protected] 🚨 Bucket Stream اعثر على دلاء Amazon S3 المثيرة للاهتمام من خلال مراقبة سجلات شفافية الشهادات. هذه الأداة ببساطة تستمع إلى سجلات شفافية...

flumberboozle

flumberboozle Suite of programs meant to aid in bug hunting and security assessments Why this weird name? Just because I heard it first here so I thought this meaningless word would be fitting name of a repository I don't know what I'm going to do with. Contents This repository contains scripts...