Cloud

Cloud computing is a technology that allows individuals and organizations to access and use computer resources, such as servers, storage, databases, networking, software, and more, over the internet.

Popular cloud service providers include Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform, among others.

S3 Bucket Enumeration

lazys3

Lazys3 is a Ruby script tool designed for AWS S3 bucket enumeration, employing various permutations to perform brute-force searches. It serves the purpose of identifying publicly accessible S3 buckets and offers the capability to search for S3 buckets associated with a particular company, facilitated by providing the company name as input.

ruby lazys3.rb <COMPANY> 

S3Scanner

S3Scanner is a utility used to locate accessible AWS S3 buckets and extract their contents. It operates by taking a list of bucket names as input, then identifies and records the discovered S3 buckets in an output file. Additionally, the tool allows for the local extraction or listing of the contents from these accessible "open" buckets.

To scan a list of target websites for open S3 buckets and dump all open buckets while logging both open and closed buckets in "found.txt," use the following command:

python3 ./s3scanner.py sites.txt

To scan a list of target websites specified in "names.txt," including closed buckets in the output, and dump all open buckets while logging the results in "found.txt," you can use this command:

python3 ./s3scanner.py --include-closed --out-file found.txt --dump names.txt

If you want to scan a list of target websites in "names.txt" and log only open buckets in the default output file "buckets.txt," use the following command:

python3 ./s3scanner.py names.txt

To save the file listings of all open buckets from "names.txt" to a file, you can run the following command:

python ./s3scanner.py --list names.txt

AWS Client

The AWS Command Line Interface (CLI) is a tool designed for the management of AWS services which allows automate tasks through scripting.

Make sure you have created your AWS account, which can be done at AWS Sign-Up.

To install the AWS CLI:

pip3 install awscli

To configure the AWS CLI:

aws configure

The configuration process will prompt you for the following details. Ensure you have logged into your AWS account to obtain these details:

1. AWS Access Key ID

2. AWS Secret Access Key

3. Default region name

4. Default output format

After providing these configuration details, you will be ready to use the AWS CLI.

Example AWS CLI command to list directories: aws s3 ls s3://[Bucket Name]