sa7mon/S3Scanner
View on GitHub ↗ ★ 3,179 Go
Scan for misconfigured S3 buckets across S3-compatible APIs!
5 mentions on Hacker News by 2 people: 1 story, 4 comments · first 2017-08-18 · latest 2024-09-10
20082026
-
…1) use a proxy or VPN 2) write a bucket guesser in python (use your imagination) 3) run this https://github.com/sa7mon/S3Scanner Now you have list/read/write status info +/- existence per S3 scanner. There, see? Didn't need a whole article.
comment by amy-petrik-214 · 2024-09-10 · in Hacking misconfigured AWS S3 buckets: A complete guide -
…you can use S3Scanner [1]. Disclosure: I wrote it and there's a major re-write coming soon(tm). [1] https://github.com/sa7mon/S3Scanner
comment by _salmon · 2020-06-17 · in Dating Apps Exposed 845 GB of Explicit Photos, Chats, and More -
…files hosted in s3 buckets. Also, shameless plug for my tool if you want to go bucket hunting: https://github.com/sa7mon/S3Scanner
comment by _salmon · 2018-04-10 · in Misconfigured FTP, SMB, Rsync, and S3 Buckets Exposing 1.5B Files -
▲ 3
Show HN: S3Scanner – Find and dump open S3 bucketsstory by _salmon · 2018-03-19 · 4 comments
-
I made a quick-and-dirty tool for doing this: https://github.com/sa7mon/S3Scanner I'll probably spend some time this weekend making things look better and improving the documentation. I made it mostly as a PoC
comment by _salmon · 2017-08-18 · in An Electronic Voting Firm Exposes 1.8M Chicagoans