Cloud Storage OSINT Workflow

1. 1. Identify candidate bucket names based on target domain (e.g. acmecorp-backups, acme-assets, acme-public).

   + Add note

2. 2. Search GrayhatWarfare by target keyword.

   + Add note

3. 3. Validate with cloud_enum (permutation brute-force of plausible names).

   + Add note

4. 4. If an open bucket is found, enumerate objects with aws s3 ls --no-sign-request s3://bucket-name/ --recursive.

   + Add note

5. 5. Document timestamp + hash before downloading evidence.

   + Add note

6. 6. For Azure: use Azure Storage Explorer or az storage blob list --account-name X --container-name Y --auth-mode login.

   + Add note

7. 7. For GCP: gsutil ls gs://bucket-name/ (without auth shows public objects).

   + Add note

8. 8. Responsible disclosure if sensitive data is found exposed.

   + Add note

🔒 Your progress and notes are saved only in this browser.