S3 Bucket Tool

About

S3 Bucket Tool turns your browser into a quiet recon companion. As you browse, it reads each page locally and surfaces the Amazon S3 buckets and AWS endpoints that page references; no setup, no accounts, no servers.

WHAT IT DOES

• Scans every page automatically and shows the bucket count on the toolbar badge. • Lists each bucket with its name, region and full URL, parsed from virtual-hosted, path-style, dual-stack and website endpoints. • Detects other AWS resources too: CloudFront, API Gateway, Elastic Beanstalk, load balancers and Lambda function URLs, grouped in their own tab. • Deep scan (optional) reads a page's linked JavaScript bundles, where hardcoded bucket URLs and asset hosts tend to hide. • Saved findings library keeps a running list of everything you've found across the sites you visit, with the origins each appeared on. Filter, open and copy in a click.

BUILT FOR RESEARCHERS

Whether you're mapping an attack surface, auditing your own assets, or doing bug-bounty recon, S3 Bucket Tool keeps the signal high and the friction low. Copy a single URL or the whole list, jump straight to any endpoint, and keep a history that survives across tabs and sessions.

PRIVACY FIRST

• Minimal permissions — only storage and activeTab. • No host permissions and no network requests of its own. • No analytics, no tracking, no remote servers. • Everything it finds is read from pages you already loaded and stored locally on your device. Nothing you browse ever leaves your machine.

RESPONSIBLE USE

The extension only inspects content a site already serves to your browser. Use it to audit your own assets or for authorized security testing, and follow all applicable laws and terms of service.

Open source: https://github.com/AnukarOP/S3-Bucket-Tool