jsbucket 1.0.0

A tool to discover S3 buckets from subdomains by analyzing JavaScript files.

JSBucket: S3 Bucket Discovery Tool From Javascript Files

JSBucket is a Python-based tool designed to analyze subdomains for Amazon S3 bucket references in JavaScript files. It extracts S3 bucket names and URLs from subdomains and outputs them in a structured JSON format. The tool supports multi-threading, progress tracking, and silent mode for seamless integration with other tools like jq, s3scanner etc. This tool is specifically designed for Bug Bounty Hunters and Pentesters.

---

Features ⚙

usage: jsbucket.py [-h] [-u SUBDOMAIN] -d DOMAIN [-l LIST] [-t THREADS] [-timeout TIMEOUT] [-o OUTPUT] [-silent]

Analyze Javascript files from given subdomain(s) for S3 buckets.

options:
  -h, --help            show this help message and exit
  -u SUBDOMAIN, --subdomain SUBDOMAIN
                        single subdomain
  -d DOMAIN, --domain DOMAIN
                        base/root domain
  -l LIST, --list LIST  file containing a list of subdomains
  -t THREADS, --threads THREADS
                        number of threads (default: 10)
  -timeout TIMEOUT      timeout for HTTP requests (default: 10s)
  -o OUTPUT, --output OUTPUT
                        output file in JSON format
  -silent               suppress all output except raw JSON

---

Installation 🚀

Prerequisites

1. Python 3.6+: Ensure Python is installed on your system.

Steps

git clone https://github.com/saeed0xf/jsbucket.git
cd jsbucket

Dependencies: Install the required libraries using pip:

pip install -r requirements.txt

---

Usage 📝

Run the script with the desired flags:

python jsbucket.py [FLAGS]

---

Flags

Flag	Description
-u SUBDOMAIN	Analyze a single subdomain (e.g., sub.example.com).
-d DOMAIN	Base/root domain (mandatory).
-l FILE	File containing a list of subdomains (one per line).
-t THREADS	Number of threads for concurrent analysis (default: 10).
-timeout SECS	Timeout for HTTP requests (default: 10 seconds).
-o OUTPUT	Save results to a JSON file (e.g., output.json).
-silent	Suppress all output except raw JSON (useful for piping into tools like jq or grep).

---

Examples 🕵️‍♀️

1. Analyze a Single Subdomain

python jsbucket.py -u sub.example.com -d example.com

2. Analyze a List of Subdomains

python jsbucket.py -l subdomains.txt -d example.com

3. Save Results to a JSON File

python jsbucket.py -l subdomains.txt -d example.com -o results.json

4. Use Silent Mode for Piping

python jsbucket.py -l subdomains.txt -d example.com -silent | jq '.[].s3_buckets[].bucket_name'

5. Customize Threads and Timeout

python jsbucket.py -l subdomains.txt -d example.com -t 20 -timeout 30

---

Output Format

Terminal Output (Non-Silent Mode)

Alert: S3 Bucket(s) found on subdomain https://sub.example.com!
{
  subdomain: https://sub.example.com,
  s3_buckets: [
    {
      bucket_name: my-bucket,
      bucket_url: https://my-bucket.s3.amazonaws.com
    }
  ]
}

✅ Analysis complete!

JSON Output (Silent Mode)

[
  {
    "subdomain": "https://sub.example.com",
    "s3_buckets": [
      {
        "bucket_name": "my-bucket",
        "bucket_url": "https://my-bucket.s3.amazonaws.com"
      }
    ]
  }
]

---

Notes

1. Silent Mode: Use the -silent flag when integrating with tools like jq or s3scanner. This ensures only raw JSON is printed to stdout.
2. Timeout: Adjust the -timeout value if subdomains take longer to respond.
3. Threads: Increase the -t value for faster analysis, but be cautious with high thread counts to avoid overwhelming the network or server.

---

Contributing

Contributions are welcome! If you find any issues or have suggestions for improvements, feel free to open an issue or submit a pull request.

License

This project is licensed under the MIT License. See the LICENSE file for details.

Contact 💻

For questions, suggestions, or feedback, feel free to reach out:

• Twitter/X: Saeed0x1
• Linkedin: Saeed0x1
• GitHub: saeed0xf