S3Crets_Scanner - Hunting For Secrets Uploaded To Public S3 Buckets

• S3cret Scanner tool designed to provide a complementary layer for the Amazon S3 Security Best Practices by proactively hunting secrets in public S3 buckets.
• Can be executed as scheduled task or On-Demand

Automation workflow

The automation will perform the following actions:

1. List the public buckets in the account (Set with ACL of Public or objects can be public)
2. List the textual or sensitive files (i.e. .p12, .pgp and more)
3. Download, scan (using truffleHog3) and delete the files from disk, once …

hunting pip public scan scanner secrets