s3-bucket-take-0v3r

S3 Bucket Takeover Scanner & Claim Tool

s3-bucket-take-0v3r

📌 Description

S3 Bucket Takeover Scanner & Claim Tool is a Python 2.7-based utility that:

Scans domain names to identify potential Amazon S3 bucket takeover vulnerabilities.
Automatically claims unregistered S3 buckets and uploads a test HTML page.

This tool is ideal for bug bounty hunting, cloud asset auditing, or legal penetration testing within authorized environments.

✅ Scan multiple domains to identify vulnerable S3 bucket links
✅ Extract and resolve domain CNAME records
✅ Automatically detect AWS region from CNAME
✅ Identify takeover vulnerabilities via The specified bucket does not exist response
✅ Automatically create (claim) the bucket if vulnerable
✅ Upload an index.html file to the bucket and enable static hosting
✅ Log vulnerable domains into vulnerable_buckets.txt
✅ Supports multi-threading for faster scanning

Function	Purpose
`run_scan()`	Checks if the target domain points to a non-existent S3 bucket
`lookup_cname()`	Resolves CNAME to identify AWS-hosted targets
`extract_region_from_cname()`	Extracts AWS region info for bucket creation
`takeover_bucket()`	Automatically creates & configures a claimed bucket
`scan_domain()`	Attempts HTTPS and HTTP scanning
`main()`	Reads domain list and starts threaded scanning