S3 存储桶扫描工具

pip3 install s3scanner

docker build . -t s3scanner:latestdocker run --rm s3scanner:latest scan --bucket my-buket

git clone [email protected]:sa7mon/S3Scanner.gitcd S3Scannerpip3 install -r requirements.txtpython3 -m S3Scanner

$ s3scanner --threads 8 scan --buckets-file ./bucket-names.txt

$ s3scanner --endpoint-url https://sfo2.digitaloceanspaces.com scan --bucket my-bucket

$ s3scanner dump --bucket my-bucket-to-dump

$ s3scanner --endpoint-url https://objects.dreamhost.com --endpoint-address-style vhost --insecure scan --bucket my-bucket

usage: s3scanner [-h] [--version] [--threads n] [--endpoint-url ENDPOINT_URL] [--endpoint-address-style {path,vhost}] [--insecure] {scan,dump} ...s3scanner: Audit unsecured S3 buckets           by Dan Salmon - github.com/sa7mon, @bltjetpackoptional arguments:  -h, --help            show this help message and exit  --version             Display the current version of this tool  --threads n, -t n     Number of threads to use. Default: 4  --endpoint-url ENDPOINT_URL, -u ENDPOINT_URL                        URL of S3-compliant API. Default: https://s3.amazonaws.com  --endpoint-address-style {path,vhost}, -s {path,vhost}                        Address style to use for the endpoint. Default: path  --insecure, -i        Do not verify SSLmode:  {scan,dump}           (Must choose one)    scan                Scan bucket permissions    dump                Dump the contents of buckets

--endpoint-url--endpoint-address-style--insecure

数字海洋空间（SFO2区域）--https://sfo2.digitaloceanspaces.com梦想主机-https://objects.dreamhost.comLinode 对象存储（欧盟中部 1 区域）-https://eu-central-1.linodeobjects.comScaleway 对象存储（nl-ams 区域）-https://s3.nl-ams.scw.cloud芥末云存储-http://s3.wasabisys.com/