I've just published Sandcastle – a Python script for AWS S3 bucket enumeration. It's the public version of a personal script formerly known as bucketCrawler. Intended for bug bounty and penetration testing engagements, Sandcastle takes a target's name as the "stem" (e.g. shopify) and iterates through a list of potential name permutations.…Yasin Soliman
Posts focusing on personal updates and other research.