bucky: discover S3 bucket misconfiguration
Bucky
Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular Expression(Regex) to match the S3 bucket used as Content Delivery Network(CDN) and sends it to the Bucky Backend engine. The backend engine receives the data from the addon and checks if the S3 bucket is publicly writeable or not. Bucky automatically uploads a text file as Proof Of Concept(PoC) if the bucket is vulnerable.
Working
Bucky addon sends the details of the s3 bucket name discovered from a user visited web pages to the backend engine. It uses AWS PHP SDK to discover misconfiguration. Users can also check for S3 bucket misconfiguration manually. All the results from automatic and manual checks are populated to the dashboard.
Installation
git clone https://github.com/smaranchand/bucky.git
Requirements: AWS Access Keys and PHP installation
Get AWS Access Keys here.
PHP installation: Install according to your OS, apt install php7.3 / brew install php7.3
Currently, the Bucky addon is not published in the Firefox addon store; as soon as the addon will be published, the addon link will be provided.
For now, users can manually load the addon into the browser to do so
- Open Firefox browser and visit about:debugging
- Click on “This Firefox” > Load Temporary Add-on
- Select the addon located at bucky/addon/bucky.js
Add AWS Access keys:
cd bucky/ nano config.inc.php Add your AWS Access Key ID and Secret Access Key. (On-Line 57 and 61)
Usage
To use Bucky, load the Bucky addon to the browser and start the backend engine.
Source: https://github.com/smaranchand/
