Skip to content

Conversation

@olizimmermann
Copy link
Contributor

📦 Add s3dns – Passive DNS-Based Cloud Bucket Discovery Tool

Summary:

This PR adds s3dns under the "Enumeration & OSINT" section of the AWS - S3 Unauthenticated Enum guide.


About the Tool:

s3dns is a lightweight DNS server designed to passively detect cloud storage buckets (AWS S3, Google Cloud Storage, Azure Blob) during reconnaissance.
It analyzes DNS traffic, follows CNAME chains, checks IP ranges, and matches against known bucket patterns — all without brute-forcing or direct API calls.


Why this belongs in the guide:

  • Enhances the passive enumeration section with a DNS-layer detection approach
  • Complements existing tips like CNAME checks and GrayhatWarfare lookups
  • Useful for stealthy recon and early detection during OSINT workflows

Repository: https://github.com/olizimmermann/s3dns

@carlospolop carlospolop merged commit 4f84fe2 into HackTricks-wiki:master Apr 30, 2025
github-actions bot pushed a commit that referenced this pull request Aug 29, 2025
Update aws-s3-unauthenticated-enum.md
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants