gobucket

S3-compatible bucket dumper/analyzer written in Go.

Features

• List public/authenticated bucket objects
• List folders only (--folder-only)
• Search object content (--search, --regex, --wordlist)
• Download objects (--download)
• Bruteforce object keys when listing is blocked (bruteforce / bf)

Usage

List objects

gobucket https://example-bucket-public.s3.amazonaws.com/

Search for AWS key-like patterns

gobucket https://example-bucket-public.s3.amazonaws.com/ \
  --regex "((?:ASIA|AKIA|AROA|AIDA)([A-Z0-7]{16}))" \
  --timeout 2m

Search output format (found)

[FOUND] <name> | <url> | keywords: <word>/<occurrences>, <word>/<occurrences>

Installation

Using go install

go install github.com/leofvo/gobucket@latest

Build from source

git clone git@github.com:leofvo/gobucket.git
cd gobucket
go build ./...

Docker

docker pull ghcr.io/leofvo/gobucket:latest
docker run --rm ghcr.io/leofvo/gobucket:latest -h

Development

gofmt -w .
go test ./...

Documentation

• Local docs source: docs/
• Published docs: https://leofvo.github.io/gobucket/

License

MIT. See LICENSE.