A 1 Liner AIO Tool to check for Vulnerable Amazon S3 Buckets as part of Bug Bounty, the uniqueness of this tool is that it can take a file full of buckets, and check all of them with various attack scenarios if they are vulnerable.
As we manage to perform Bug Bounty we write our own scripts that perform various attacks as part of quickly testing for vulnerabilities & exploits.
Its from my personal collection library as part of a methodology that allows quickly to check for false positives or specific exploitation of various vulnerabilities.
For Education Purpose Only - Do not use for illegal purposes
apt-get install figlet
apt-get install xcowsay
pip install lolcat
apt-get install toilet
Configure AWS-CLI first with your own API Key for this to work!
Tested on Kali Linux 2021 - Can be used on various Linux Distros
chmod +x s3-buckets-aio-pwn.sh
./s3-buckets-aio-pwn.sh bucketlist.txt
You must provide the buckets in a text file, without any http:// or https:// - Only the Bucket address in this format: bucket.name One bucket per line.
For this tool to work, you must first configure your aws-cli by adding an API Key!
More info here: https://docs.aws.amazon.com/rekognition/latest/dg/setup-awscli-sdk.html
You can Support our Work by Joining our Patreon for Exclusive Video Content:
https://www.patreon.com/blackhatethicalhacking
Black Hat Ethical Hacking - Copyrights all rights reserved - blackhatethicalhacking.com
Introducing our Merch Store, designed for the Offensive Security community. Explore a curated collection of apparel and drinkware, perfect for both professionals and enthusiasts. Our selection includes premium t-shirts, hoodies, and mugs, each featuring bold hacking-themed slogans and graphics that embody the spirit of red teaming and offensive security. Hack with style and showcase your dedication to hacker culture with gear that’s as dynamic and resilient as you are. 😊
