297 matches found
s3-account-search
S3 Account Search This tool lets you find the account id an S3 bucket belongs too. For this to work you need to have at least one of these permissions: Permission to download a known file from the bucket s3:getObject. Permission to list the contents of the bucket s3:ListBucket. Additionally, you...
sandcastle
Inspired by a conversation with Instacart's @nickelser on HackerOne, I've optimised and published Sandcastle – a Python script for AWS S3 bucket enumeration, formerly known as bucketCrawler. The script takes a target's name as the stem argument e.g. shopify and iterates through a file of bucket...
flan
Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...
goGetBucket
goGetBucket - AWS S3 Bucket discovery through alterations and permutations Warning: code is horrible as I have only used this for personal use. When I get the time I will make it less-horrible and faster. When performing a recon on a domain - understanding assets they own is very important. AWS S...
gospider
GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO install GO111MODULE=on go install github.com/jaeles-project/gospider@latest Docker...
bucket-brute
bucket-brute Aws S3 Tko Tool usage: bucket-brute.py -h -u URL -p PROXY -b BUCKET optional arguments: -h, --help show this help message and exit -u URL, --url URL No Such Bucket URL -p PROXY, --proxy PROXY Proxy for debugging -b BUCKET, --bucket BUCKET Bucket Name Example Creating mytest in region...
s3-leaks
s3-leaks List of AWS S3 Leaks Feel free to send in a PR if you know of other leaks Date| Description| Notes ---|---|--- April 2025| Thoughts of AWS Access key ID's from an S3 bucket| The keys to the AWS kingdom March 2025| 16,000 subscribers to Nine newspapers from Australia| name, postal address...
CVE-2026-100348 vulnerabilities
Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...
CVE-2026-100351 vulnerabilities
Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...
GHSA-FH4F-47MF-F2GJ vulnerabilities
Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...
GHSA-MH7X-F8WQ-4JHX vulnerabilities
Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...
GHSA-G8CF-RCJF-C8CF vulnerabilities
Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...
CVE-2026-100354 vulnerabilities
Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...
GHSA-VRCC-3CH7-HPPW vulnerabilities
Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...
GHSA-23VG-4CJM-66Q5 vulnerabilities
Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...
CVE-2026-100352 vulnerabilities
Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...
CVE-2026-100353 vulnerabilities
Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...
GHSA-RJ39-CV6W-8WV7 vulnerabilities
Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...
CVE-2026-100347 vulnerabilities
Vulnerabilities for packages: nuclei, crossplane-provider-aws-dynamodb, crossplane-provider-aws-elasticache, crossplane-provider-aws-eks, crossplane-provider-azure-storage, crossplane-provider-family-azure, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2,...
htb-facts
HTB — Facts Easy/Linux - Season 10 Summary Facts is an Easy Linux machine that requires exploiting a known vulnerability CVE-2025-2304 in Camaleon CMS to extract local AWS S3 credentials. Enumerating the internal S3 buckets reveals an SSH private key that must be cracked using John the Ripper to...