sa7mon/S3Scanner
S3Scanner
S3Scanner is a security tool for auditing public access and misconfigured permissions across S3-compatible storage providers. It functions as a storage auditor and security scanner designed to identify open buckets, enumerate publicly accessible objects, and exfiltrate data from misconfigured cloud environments.
The project is distinguished by its integration with message brokers, allowing it to consume target lists for large-scale cloud infrastructure audits. It also provides utilities for dumping the entire contents of misconfigured buckets to local directories and calculating the total size of exposed storage volumes.
The tool covers a broad surface of security operations, including cross-provider permission auditing, recursive object enumeration, and identifier validation. Results can be exported to relational databases for long-term tracking or streamed as machine-readable JSON for integration with other tools.
Features
- Public Bucket Discovery - Identifies publicly accessible cloud storage buckets and evaluates their read permissions.
- Cloud Storage Enumerators - Provides utility for listing objects and calculating total size of public cloud storage buckets.
- Bucket File Listings - Retrieves recursive lists of files within buckets when public read permissions are active.
- Cloud Object Enumerations - Retrieves full lists of stored files by iteratively calling storage APIs to calculate total exposed volume.
- Cloud Object Enumerations - Lists files and calculates the total size of exposed objects within S3-compatible storage.
- Bucket Sources - Implements recursive listing of files and directories within object storage buckets to identify exposed data.
- S3-Compatible Security Auditing - Audits storage permissions and lists contents across various providers using a unified S3 API interface.
- Cloud Storage Scanning - Performs security audits and permission checks against various cloud storage platforms and custom endpoints.
- S3-Compatible Security Scanning - Audits public access and misconfigured permissions across various S3-compatible storage providers using a unified API interface.
- Security Automation Workflows - Integrates storage audits into message queue workflows to automate large-scale permission checks.
- Bucket Data Exfiltration - Provides the ability to dump entire contents of misconfigured buckets to local directories for analysis.
- Cloud Data Leak Detection - Identifies publicly accessible buckets and downloads exposed files to assess security breach impact.
- Cloud Storage Auditors - Checks for open buckets and permission leaks using the S3 API standard.
- Cloud Storage Security Scanners - Audits public access, misconfigured permissions, and exposed data across S3-compatible storage.
- Permission Auditing Tools - Provides utilities for analyzing and verifying access control policies on cloud storage buckets.
- Queue-Driven Security Scanners - Consumes target lists from message brokers to perform large-scale cloud infrastructure audits.
- Cloud Storage Volume Calculation - Calculates the total storage volume of exposed buckets by summing the sizes of all enumerated objects.
- Message Queue Workers - Uses background workers to consume targets from message queues for distributed high-volume scanning.
- Message Broker Consumers - Consumes target lists from message brokers to automate large-scale cloud infrastructure audits.
- Data Exfiltration Tools - Dumps the entire contents of misconfigured storage buckets to local directories for analysis.
- Reconnaissance - Scanning and dumping contents of open cloud storage buckets.
- Reconnaissance Tools - Scanning and dumping contents of open cloud storage buckets.
- Vulnerability Scanners - Scans for open AWS S3 buckets.
- Cloud and Git Security - Scan for open and misconfigured S3 buckets.
- Cloud Security - Scans and dumps open S3 buckets.
- Cloud Security Tools - Finds and scans open AWS S3 buckets for sensitive data.
- Cloud Storage Auditing - Scans for and dumps contents of open S3 buckets.
- Storage Auditing - Scans for and dumps contents of open S3 buckets.
