initstring / cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
MIT License
1.54k stars 224 forks source link

AWS S3 bucket checks not working #71

Open Zoudo opened 3 weeks ago

Zoudo commented 3 weeks ago

I assess the AWS S3 bucket checks are not working. Anyone able to validate?

nrathaus commented 3 weeks ago

Can you clarify what isn't working?

Are you seeing errors?

Can you share the keyword you are using?

Zoudo commented 3 weeks ago

Thank you. No errors but it doesn’t list out any s3 buckets especially when it has listed buckets for the same keywords in the past. I tried all keywords I know have s3 buckets but it just skips that section, nothing happens. I think this may be a change or restriction from AWS? Can you try the script with any keyword and see if it lists any S3 bucket? Sent from my iPhoneOn Jun 4, 2024, at 10:52 PM, Noam Rathaus @.***> wrote: Can you clarify what isn't working? Are you seeing errors? Can you share the keyword you are using?

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you authored the thread.Message ID: @.***>

Zoudo commented 3 weeks ago

See for example, it doesnt show any sign of bruteforcing the s3 buckets, it looks like it skips to AWS Apps.

+++++++++++++++++++++++++ amazon checks ++++++++++++++++++++++++++

[+] Checking for S3 buckets

Elapsed time: 00:02:12

[+] Checking for AWS Apps [*] Brute-forcing a list of 1837 possible DNS names AWS App Found:: https://production.awsapps.com AWS App Found:: https://productionanalytics.awsapps.com AWS App Found:: https://awsproduction.awsapps.com AWS App Found:: https://aws-production.awsapps.com

nrathaus commented 2 weeks ago

I have found the underlying cause, a pathless query to an S3 will always return unknown bucket, I made a minor fix to the code to fix this issue: https://github.com/initstring/cloud_enum/pull/72

I hope that the maintainer is still around to merge this in

I created a fork and have added more stuff to it, like JSON based log output