Bucketbunny - Automation for open s3 bucket pocs for pentest/bugbounty/red-teamings

This is a simple bash script to automate a number of tasks for the open s3 bucket pocs.

• Installation

  git clone https://github.com/iamthefrogy/bucketbunny.git
  cd bucketbunny
  chmod +x bucketbunny.sh

• Usage

  ./bucketbunny.sh s3_bucket_name

TODO

• ✅ List bucket files
• ✅ Upload file to bucket and verify
• ✅ Delete file from bucket and verify
• If bucket is not writable, provide custom error message
• If bucket is not readable, provide custom error message
• If no bucket found, provide custome error message
• Guessable objects
• Readable bucket policy
• Much more regarding S3 bucket enumeration and all the things we can do..

Note
This tool is in the very early phase of the development but trust me I have some great plans for this tool. So stay tuned.

Warning: This is just a research project. Kindly use it with caution and at your own risk. I won't be responsible for any misuse conduct.