README.en.md

🐓Tutorial

git clone https://github.com/UzJu/Cloud-Bucket-Leak-Detection-Tools.git
cd Cloud-Bucket-Leak-Detection-Tools/
pip3 install -r requirements.txt
python3 main.py -h

You need to configure your corresponding cloud vendor AK in the config/conf.py file before using it.

1、Ariyun storage bucket

1.1, single storage bucket detection

python3 main.py -aliyun [BucketURL]

1.2. Automatic bucket hijacking

Automatically hijack a bucket when it is detected as not existing

1.3. Bulk bucket address detection

# fofa syntax
domain="aliyuncs.com"
server="AliyunOSS" domain="aliyuncs.com"

# Use -faliyun
python3 main.py -faliyun url.txt

2. Tencent cloud storage bucket

python3 main.py -tcloud [storage bucket address]

3. Huawei cloud storage bucket

python3 main.py -hcloud [storage bucket address]

4. AWS storage bucket

python3 main.py -aws [storage bucket address]

images/image-20220716142431142.png)

5. Scan results saving

The scan results will be stored in the results directory

👮0xFFFFFFFF Disclaimer

1、This tool is only for academic exchange, it is forbidden to use the tool to do illegal things

2, just writing for fun

3、My WeChat

If you have a better suggestion or make a friend

4、Blog: UzzJu.com 5、Public

Curve chart