Spider for Bucket Name Enumeration

LolrusLove is a Spider for Bucket Name Enumeration (AWS S3 Bucket, Azure Blob Storage, etc...).

I often find that many bucket names are sufficiently obscurely named that I often need to find at least one valid bucket name via this spider before I am successful in finding sensitive information.

Once a valid bucket name is found, guessing other valid bucket names (i.e. altdns) is often trivial.

Download Tool: https://gist.github.com/TweekFawkes/62c921a62023350492d715d8cf73d4d3

Bryce KunzComment