{"id":13843335,"url":"https://github.com/smaranchand/bucky","last_synced_at":"2025-07-11T18:31:41.305Z","repository":{"id":136763844,"uuid":"284842005","full_name":"smaranchand/bucky","owner":"smaranchand","description":"Bucky (An automatic S3 bucket discovery tool)","archived":false,"fork":false,"pushed_at":"2022-01-06T06:53:18.000Z","size":1004,"stargazers_count":192,"open_issues_count":0,"forks_count":27,"subscribers_count":6,"default_branch":"master","last_synced_at":"2024-11-21T14:39:03.490Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/smaranchand.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2020-08-04T01:01:38.000Z","updated_at":"2024-11-19T20:07:49.000Z","dependencies_parsed_at":"2024-01-07T13:07:43.946Z","dependency_job_id":null,"html_url":"https://github.com/smaranchand/bucky","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"purl":"pkg:github/smaranchand/bucky","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smaranchand%2Fbucky","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smaranchand%2Fbucky/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smaranchand%2Fbucky/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smaranchand%2Fbucky/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/smaranchand","download_url":"https://codeload.github.com/smaranchand/bucky/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smaranchand%2Fbucky/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":264870285,"owners_count":23676196,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:01:59.877Z","updated_at":"2025-07-11T18:31:40.978Z","avatar_url":"https://github.com/smaranchand.png","language":"PHP","funding_links":[],"categories":["PHP","PHP (184)","Mobile"],"sub_categories":["AWS"],"readme":"\n![Bucky](https://github.com/smaranchand/bucky/blob/master/bucky.gif?raw=true)\n\n# Project is on temporary hold.\n\n# Bucky\nBucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular Expression(Regex) to match the S3 bucket used as Content Delivery Network(CDN)  and sends it to the Bucky Backend engine. The backend engine receives the data from addon and checks if the S3 bucket is publicly writeable or not. Bucky automatically uploads a text file as Proof Of Concept(PoC) if the bucket is vulnerable.\n\n\n# Working\nBucky addon sends the details of s3 bucket name discovered from a user visited web pages to backend engine.\nIt uses [AWS PHP SDK](https://docs.aws.amazon.com/sdk-for-php/v3/developer-guide/getting-started_installation.html) to discover misconfiguration.\nUsers can also check for S3 bucket misconfiguration manually. All the results from automatic and manuall check are populated to dashboard.\n\nCheckout video https://vimeo.com/444442588\n\n# Installation\n\n```\ngit clone https://github.com/smaranchand/bucky.git\ncd bucky\n\n```\n\nRequirements: AWS Access Keys and PHP installation\n\nGet AWS Access Keys: https://console.aws.amazon.com/iam/home?#/security_credentials\n\nPHP installation: Install according to your OS,  apt install php7.3 / brew install php7.3\n\n\nCurrently, Bucky addon is not published in the Firefox addon store; as soon as the addon will be published, the addon link will be provided.\n\nFor now, users can  manually load the addon into the browser to do so\n\n1. Open Firefox browser and visit about:debugging\n2. Click on \"This Firefox\" \u003e Load Temporary Add-on\n3. Select the addon  located at bucky/addon/bucky.js\n\nAdd AWS Access keys:\n```\ncd bucky/\nnano config.inc.php\nAdd your AWS Access Key ID and Secret Access Key. (On-Line 57 and 61)\n```\n\n\n# Usage\n\nTo use Bucky, load the Bucky addon to the browser and start backend engine.\n```\ncd bucky/\nchmod +x run.sh\n./run.sh\n\nThe backend engine runs on http://127.0.0.1:13337\nBrowse websites, Bucky will discover S3 buckets automatically and will be reflected in the dashboard.\nVisit the above address to access Bucky dashboard.\n```\n\n# Screenshots\nRunning Bucky\n\n![run_bucky](https://github.com/smaranchand/bucky/blob/master/scr/run_bucky.png?raw=true)\n\nLoading Addon\n\n![load_addon](https://github.com/smaranchand/bucky/blob/master/scr/bucky_addon.png?raw=true)\nUser Interface\n\n![dashboard](https://github.com/smaranchand/bucky/blob/master/scr/dashboard_loading.png?raw=true)\n\nAll Buckets\n\n![all_buckets](https://github.com/smaranchand/bucky/blob/master/scr/all_buckets.png?raw=true)\nManual Check\n\n![manual_check](https://github.com/smaranchand/bucky/blob/master/scr/manual_check.png?raw=true)\n\nPOC By Bucky\n\n![Bucky_POC](https://github.com/smaranchand/bucky/blob/master/scr/vulnerable_poc.png?raw=true)\n\n\n\n# Note\nBucky is not a perfect tool to discover S3 buckets, it is well known that Bucky lacks many feautres and it  may fail to detect the misconfiguration sometimes. Certain changes and  development are in pipeline. I really appreciate the feedbacks and contribution.\n\n\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsmaranchand%2Fbucky","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsmaranchand%2Fbucky","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsmaranchand%2Fbucky/lists"}