virtuesecurity / aws-extender-cli

AWS Extender CLI is a command-line script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common misconfiguration issues using the boto/boto3 SDK library.

AWS Extender CLI

AWS Extender CLI is a command-line script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common misconfiguration issues using the boto/boto3 SDK library.

Installing Dependencies

Both of boto and boto3 are required. You can install them using pip:

$ pip install -r requirements.txt

CLI Arguments

Below is a description of supported arguments:

Argument	Description	Required
-h, --help	Show a help message and exit	False
-f, --filepath	The path of a bucket names list	False*
-b, --bucket	The name of the bucket to test	False*
-w, --wordlist	A wordlist filepath	False
-o, --output	An output filename	False
-k, --keys	The path of your credentials file	False
-s, --service	the name of the storage service ("S3", "GS", or "Azure")	True

Notes:

• Mutually exclusive arguments are denoted by an asterisk.
• The -k/--keys argument expects the filepath of your AWS/GS keys. The keys are expected to be in the following format:

aws_access_key_id=XXXXXXXXXXXXXXXXXXXX
aws_secret_access_key=XXXXXXXXXXXXXXXXXXXXXX

Example Usage:

$ python aws_extender_cli.py -s S3 -b flaws.cloud -k keys.csv
===== (flaws.cloud) =====
[*] s3:ListMultipartUploadParts
[*] s3:ListBucket
	* hint1.html
	* hint2.html
	* hint3.html
	* index.html
	* robots.txt
	* secret-dd02c7c.html

aws-extender-cli's Issues

Python 3.9 "getchildren" error

I'm receiving the following error when running with Python 3.9.1.

AttributeError: 'xml.etree.ElementTree.Element' object has no attribute 'getchildren'

Looks like the getchildren method was removed in python 3.9.

I guess I can just use an earlier verison of python, but it would be great to have a longer term fix.

Python 3 Support

It would be cool to have Python 3 support, and at the very least, a note in the README that 2.x is required currently.

⇒  python --version
Python 3.5.2

python aws_extender_cli.py -h
  File "aws_extender_cli.py", line 497
    print ''.join(issues).strip()
           ^
SyntaxError: invalid syntax

Key file format

Rather than expecting a custom format

AccessKeyId=XXXX
SecretKey=XXXX

the tool could parse the format of ~/.aws/credentials

[profile_name]
aws_access_key_id =  xxx
aws_secret_access_key = xxx