Skip to main content

Recon tool

Project description

kicks3

S3 bucket finder from html,js and bucket misconfiguration testing tool.

Currently this tool check five testcases

  1. Object listing for Unauthenticated users

  2. Object listing for Authenticated users

  3. Public writable for all aws users

  4. Bucket Acl public read

  5. Put Bucket Policy

pip install awscli

aws configure

get your aws keys from aws console

Installation

pip install kick-s3

OR

git clone https://github.com/abuvanth/kicks3.git

cd kicks3

python setup.py install

Usage

##demo asciicast

single target

kicks3.py -u http://target

this will looking for s3 buckets in html and javascript files.

Single Bucket

kicks3.py -b bucketname

test single bucket name

Bucket list

kicks3.py -bl bucketnamelist.txt

list of websites

kicks3.py -u http://target -l sitelist.txt

authenticated page

kicks3.py -u http://target -c 'cookievalues'

subdomains

kicks3.py -u target.com -s 1

Use kicks3 as a module

import kicks3

bucketurllist=kicks3.finds3('target.com')
bucketlist=kicks3.get_bucket_name(bucketurllist)
scan_result=kicks3.scan_s3(bucketlist)

for result in scan_result:

    print(result)#bucketname(testname),listable_for_unauth_users(true or false),listable_auth_users(true or false),writable(true or false)

buckets from text file

import kicks3
blist=open('s3.buckets.txt','r').readlines()
result=kicks3.scan_s3(blist)

Scan for subdomains

bucketurllist=kicks3.finds3(['target.com'],sub=1,cookies='valueofyoursitescookie') #cookies for authenticated pages,
bucketlist=kicks3.get_bucket_name(bucketurllist)
scan_result=kicks3.scan_s3(bucketlist)

for result in scan_result:

    print(result)#bucketname(testname),listable_for_unauth_users(true or false),listable_auth_users(true or false),writable(true or false)

results are stored in s3out.txt file.

Note: sub and cookies are optional parameters of finds3 function

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for kick-s3, version 2.1.1
Filename, size File type Python version Upload date Hashes
Filename, size kick-s3-2.1.1.tar.gz (4.9 kB) File type Source Python version None Upload date Hashes View

Supported by

Pingdom Pingdom Monitoring Google Google Object Storage and Download Analytics Sentry Sentry Error logging AWS AWS Cloud computing DataDog DataDog Monitoring Fastly Fastly CDN DigiCert DigiCert EV certificate StatusPage StatusPage Status page