HTDark | Underground Hacking Forum and Cybersecurity Community
  • Earn real money by being active: Hello Guest, earn real money by simply being active on the forum — post quality content, get reactions, and help the community. Once you reach the minimum credit amount, you’ll be able to withdraw your balance directly. Learn how it works.

S3Scanner v2.0.2 - Scan for open S3 buckets and dump

Status
Not open for further replies.
itsMe

itsMe

*KillmeMories*
Staff member
Administrator
Super Moderator
Hacker
Specter
Crawler
Shadow
Joined
Jan 8, 2019
Messages
56,608
Solutions
2
Reputation
32
Reaction score
100,454
Points
2,313
Credits
32,600
‎6 Years of Service‎
 
76%
115632654-d4f8c280-a2cd-11eb-87ee-c70bbd4f1edb.png


A tool to find open S3 buckets and dump their contents

The tool takes in a list of bucket names to check. Found S3 buckets are output to file. The tool will also dump or list the contents of ‘open’ buckets locally.

Features

    ⚡️ Multi-threaded scanning
    🔭 Supports tons of S3-compatible APIs
    🕵️‍♀️ Scans all bucket permissions to find misconfigurations
    💾 Dump bucket contents to a local folder
    🐳 Docker support

Changelog v2.0.2

    Fixes #122 – CVE-2021-32061: Path Traversal via dump of malicious bucket

To see this hidden content, you must like this content.
 
Status
Not open for further replies.
Back
Top