Ross ROSS = Recommend OSS · open-source software intelligence for agents

eth0izzle/bucket-stream

Find interesting Amazon S3 Buckets by watching certificate transparency logs. observed · 2026-08-28

github.com/eth0izzle/bucket-stream · homepage · Python · MIT (permissive) observed · 2026-08-28

Health v2 · maintenance only

36/100

  • Activity 9
  • Release rhythm 35
  • Longevity 100

Flags: no_releases

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 3199
  • days_rel: n/a
  • days_push: 551
  • n_releases_24m: 0

Full methodology

Adoption not part of the score

1808 stars · 207 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Python CLI tool that monitors certificate transparency logs via certstream and discovers public Amazon S3 buckets by generating permutations of domains from newly issued certificates. It was created to demonstrate the risks of misconfigured public S3 buckets.

Use cases

  • find public s3 buckets from certificate transparency logs
  • osint reconnaissance for exposed aws s3 storage
  • discover misconfigured cloud storage buckets in real time
  • red team tooling for finding open s3 buckets
  • audit whether company domains have publicly accessible s3 buckets
  • monitor certstream for newly registered domains and check bucket permutations

When to choose

  • you want to demonstrate or test exposure of public S3 buckets during authorized security assessments
  • you need real-time discovery of buckets tied to newly issued TLS certificates
  • you want a lightweight Python tool for S3-focused OSINT

When to avoid

  • you need a maintained tool - the project is explicitly no longer maintained
  • you need broad cloud storage scanning beyond Amazon S3
  • you need authenticated, large-scale bucket enumeration without rate limits
  • you need a GUI or managed service rather than a CLI

Facets

cli-tool · maturity abandoned

osint security web-scraping cli security osint cloud-computing developer-tools python cli windows s3-buckets certificate-transparency certstream red-team reconnaissance aws cybersecurity linux macos

2 sources

Member repositories

RepositoryRoleHealth v2
eth0izzle/bucket-streammain36

For agents

markdown · JSON · MCP: product_card(name="eth0izzle/bucket-stream")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem