evyatarmeged / Raccoon

A high performance offensive security tool for reconnaissance and vulnerability scanning
MIT License
3.07k stars 396 forks source link

Support more storages (Azure, GCP) under storage_explorer.py #27

Open evyatarmeged opened 5 years ago

evyatarmeged commented 5 years ago

storage_explorer.py is being ran as part of the general web scan. In its current form, it searches for Amazon S3 buckets, tests their permissions (traversing up for each dir) and, given an open bucket, scans for any sensitive files - finally adding them to the report.

Ideally, Raccoon should scan other cloud-based storage solutions. Unfortunately, I simply cannot find the time to work on such enhancements at the moment.

If someone is willing to take the research and implementation of this feature upon himself, he is welcome to give it a shot. I'll be more than happy to assist with whatever is needed.