AWSBucketDump
Security assessment tool for finding and dumping AWS S3 buckets
Cloud & Assets7 commands
#s3#aws#bucket#dump
Installation
1Clone repository
2Install dependencies
3Verify installation
# Clone repository
git clone https://github.com/jordanpotti/AWSBucketDump.git
cd AWSBucketDump
# Install dependencies
pip install -r requirements.txt
# Verify
python3 AWSBucketDump.py -hBasic Usage
Check a list of S3 bucket names and optionally download their contents
# Check bucket names from file
python3 AWSBucketDump.py -l bucketnames.txt
# Dump contents of open buckets
python3 AWSBucketDump.py -l bucketnames.txt -D
# Check with specific size limit
python3 AWSBucketDump.py -l bucketnames.txt -g 100
# Check single bucket
python3 AWSBucketDump.py -b my-bucket-name
# Output results
python3 AWSBucketDump.py -l bucketnames.txt -o results.txtCommand Reference
7 commands
1File containing bucket names
-l2Single bucket name to check
-b3Download contents of open buckets
-D4Max file size in MB to download
-g5Output file for results
-o6AWS region
-r7Number of threads
-tWhen to Use
1
Large-scale S3 bucket discovery and assessment2
Data leak investigations3
Cloud security audits4
Bug bounty S3 enumerationNotes & Tips
1
Can download all files from open buckets (be careful with data)2
Use -g to limit file size and avoid downloading massive files3
Always confirm you have permission before dumping bucket contentsCommon Errors & Solutions
Too many files to download
Use -g flag to limit file size in MB
Bucket not accessible
The bucket may exist but not be publicly accessible