s3scanner

No entries match these filters. Clear filters

1. v3.0.3 Sep 24, 2023 · release notes

   Adds Scaleway support and region validation for bucket scanning.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.0.3 https://github.com/sa7mon/s3scanner.git
   # already have the repo? check out this version:
   $ git checkout v3.0.3

   • add scaleway support to scan S3-compatibleS3-compatibleAn object-storage API that mirrors Amazon S3's HTTP interface, so any client or cyber tool written for AWS S3 works unchanged against any compliant storage backend. buckets on the Scaleway infrastructure
   • add region check to validate regions during scanning

   2 details in Everything

2. v3.0.2 Sep 11, 2023 · release notes

   s3scanner v3.0.2 adds proxy support for S3 bucket scanning

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v3.0.2 https://github.com/sa7mon/s3scanner.git
   # already have the repo? check out this version:
   $ git checkout v3.0.2

   └──▷ TRY IT
   Scan buckets through a corporate HTTP proxy that requires external routing.
   copy

   $ s3scanner --proxy http://10.0.0.1:8080 my-bucket-name

   • Adds proxy support via --proxy CLI flag to route S3 requests through a custom HTTP proxy

   1 detail in Everything

3. 2.0.1 Apr 24, 2021 · release notes

   s3scanner 2.0.1 adds GCP bucket scanning support and improves endpoint validation

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.0.1 https://github.com/sa7mon/s3scanner.git
   # already have the repo? check out this version:
   $ git checkout 2.0.1

   • Adds automated tests to validate 3rd party endpoints

   1 detail in Everything

4. 2.0.0 Apr 23, 2021 · release notes

   s3scanner 2.0 adds multi-threaded scanning/resumable dumping, non-AWS support, and dangerous permission checks

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.0.0 https://github.com/sa7mon/s3scanner.git
   # already have the repo? check out this version:
   $ git checkout 2.0.0

   └──▷ USE IT
   Scan a non-AWS S3-compatibleS3-compatibleAn object-storage API that mirrors Amazon S3's HTTP interface, so any client or cyber tool written for AWS S3 works unchanged against any compliant storage backend. endpoint (e.g., MinIO) for anonymous access
   shell copy

   s3scanner scan --endpoint-url https://minio.example.com -b test-bucket

   • Adds multi-threaded scanning and dumping to speed up bucket enumeration and object retrieval
   • Adds resume-able dumping that skips already-downloaded objects unless sizes differ
   • Supports scanning non-AWS S3-compatible APIs via generic backend instead of AWS-only
   • Adds checks for dangerous permissions (Write, WriteACP) during bucket enumeration

   4 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Output is now unified to stdout; previous separate file and console format flags are removed
5. 1.0.0 Mar 19, 2018 · release notes

   s3scanner v1.0.0 shifts to boto for accurate bucket discovery and adds getAcl support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.0.0 https://github.com/sa7mon/s3scanner.git
   # already have the repo? check out this version:
   $ git checkout 1.0.0

   • checkBucket() now uses the boto library instead of HTTP GET requests to identify buckets, correctly finding private but listable buckets and eliminating the need for region specifications.
   • Adds getAcl() function which attempts to retrieve Access Control Lists (ACLsACLsAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource.) for discovered buckets.
   • Adds new CLI flag --version to display the tool's version number.
   • Bucket input file format is now buckets.txt containing only bucket names, dropping the previous bucket:region format.

   4 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The --default-region argument has been removed; users must no longer specify regions as region detection is handled automatically via boto.
   • !The --include-closed argument has been removed.
6. 0.2.0 Mar 13, 2018 · release notes

   s3scanner 0.2.0 adds --list CLI flag to save bucket listings to file

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.2.0 https://github.com/sa7mon/s3scanner.git
   # already have the repo? check out this version:
   $ git checkout 0.2.0

   └──▷ USE IT
   Save the full contents of a public S3 bucket to a JSON file for later analysis.
   shell copy

   s3scanner --list -b my-public-bucket

   • Adds --list argument to enable saving bucket listings to file
   • Adds a warning when properly configured AWS credentials are not found

   2 details in Everything

7. 0.1.1 Mar 10, 2018 · release notes

   Adds sizeCheckTimeout variable to configure bucket size retrieval timeout

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 0.1.1 https://github.com/sa7mon/s3scanner.git
   # already have the repo? check out this version:
   $ git checkout 0.1.1

   • Adds the sizeCheckTimeout variable for configuring the timeout duration of getSize() calls

   1 detail in Everything