nfsshell alternatives

Looking for an alternative tool to replace nfsshell? During the review of nfsshell we looked at other open source tools. Based on their category, tags, and text, these are the ones that have the best match.

Top 3

  1. Bucket Finder (AWS S3 bucket finder)
  2. Bucket Stream (AWS S3 bucket discovery using CT logs)
  3. BuQuikker (find open AWS S3 buckets)

These tools are ranked as the best alternatives to nfsshell.

Alternatives (by score)

74

Bucket Finder

Introduction

The Bucket Finder tool can be a helpful tool during penetration testing and security assessments. It helps with the discovery of S3 buckets on the Amazon AWS cloud.

Project details

Bucket Finder is written in Ruby.

Strengths and weaknesses

  • + The source code of this software is available
  • - No updates for a while

Typical usage

  • Data leak detection
  • Penetration testing
  • Security assessment

Bucket Finder review

64

Bucket Stream

Introduction

Bucket Stream can be used to discover AWS S3 buckets. This tool may be helpful during reconnaissance and security assessments. As it does not include active scanning on the target itself, it is a passive way of finding information. This is a huge benefit, as you don't have to guess or brute-force the names.

Project details

Bucket Stream is written in Python.

Strengths and weaknesses

  • + Tool is easy to use
  • + The source code of this software is available
  • - No releases on GitHub available

Typical usage

  • Discovery of sensitive information
  • Information leak detection
  • Penetration testing
  • Reconnaissance

Bucket Stream review

64

BuQuikker

Introduction

BuQuikker is a security tool to scan the Amazon S3 storage service. Its goal is to find open and unprotected S3 buckets.

Project details

BuQuikker is written in Python.

Strengths and weaknesses

  • + The source code of this software is available

    Typical usage

    • Data leak detection
    • Security assessment

    BuQuikker review

    56

    inSp3ctor

    Introduction

    Like other S3 bucket scanners, inSp3ctor helps to find valid storage buckets on Amazon's AWS platform. This can be useful for security assignments like penetration testing or see what information is available about a company. Another option is using it to see if any private data is leaking.

    Project details

    inSp3ctor is written in Python.

    Strengths and weaknesses

    • + The source code is easy to read and understand
    • + Very low number of dependencies
    • + The source code of this software is available
    • - No releases on GitHub available

    Typical usage

    • Penetration testing
    • Security assessment
    • Storage security testing

    inSp3ctor review

    60

    S3Scanner

    Introduction

    The aptly named S3Scanner is to be used to detect AWS S3 buckets. Discovered buckets are displayed, together with the related objects in the bucket.

    Project details

    S3Scanner is written in Python.

    Strengths and weaknesses

    • + The source code of this software is available

      Typical usage

      • Information gathering
      • Information leak detection
      • Penetration testing
      • Storage security testing

      S3Scanner review

      96

      Samba

      Introduction

      Since 1992, Samba provides file and print services based on the server message block (SMB) protocol. This protocol was released by Microsoft as part of the open specifications.

      Samba helps with interoperability between systems running Microsoft Windows and those running one of the flavor of Unix like Linux. The toolkit allows systems to become part of the Active Directory environment and join a domain controller or domain member.

      Project details

      Strengths and weaknesses

      • + The source code of this software is available

        Samba review

        64

        Teh S3 Bucketeers

        Introduction

        Tools like Teh S3 Bucketeers are valuable for doing reconnaissance and information gathering. They may be used during penetration tests and security assessments. The primary goal of these tools is to find S3 buckets that may lead to sensitive data stored on Amazon's storage service.

        Project details

        Teh S3 Bucketeers is written in shell script.

        Strengths and weaknesses

        • + The source code is easy to read and understand
        • + Used language is shell script
        • + The source code of this software is available
        • - No releases on GitHub available

        Typical usage

        • Penetration testing
        • Security assessment
        • Storage security testing

        Teh S3 Bucketeers review

        Some relevant tool missing as an alternative to nfsshell? Please contact us with your suggestion.