# eth0izzle/bucket-stream

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

Repository: https://github.com/eth0izzle/bucket-stream
Canonical: https://ross.abutalabs.com/products/bucket-stream
Homepage: https://www.darkport.co.uk
Language: Python
License: MIT
License Family: permissive
Topics: cyber, cyint, amazon-s3, certificate-transparency, certstream
Last push: 2025-02-28T15:44:26+00:00

## Health v2 (maintenance only)
Score: 36/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 9, release rhythm 35, longevity 100
- inputs: {"age_days": 3199, "days_push": 551, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1808, forks 207 (observed 2026-08-28T04:05:39.268088+00:00)

## What it is
A Python CLI tool that monitors certificate transparency logs via certstream and discovers public Amazon S3 buckets by generating permutations of domains from newly issued certificates. It was created to demonstrate the risks of misconfigured public S3 buckets.

## Use cases
- find public s3 buckets from certificate transparency logs
- osint reconnaissance for exposed aws s3 storage
- discover misconfigured cloud storage buckets in real time
- red team tooling for finding open s3 buckets
- audit whether company domains have publicly accessible s3 buckets
- monitor certstream for newly registered domains and check bucket permutations

## When to choose
- you want to demonstrate or test exposure of public S3 buckets during authorized security assessments
- you need real-time discovery of buckets tied to newly issued TLS certificates
- you want a lightweight Python tool for S3-focused OSINT

## When to avoid
- you need a maintained tool - the project is explicitly no longer maintained
- you need broad cloud storage scanning beyond Amazon S3
- you need authenticated, large-scale bucket enumeration without rate limits
- you need a GUI or managed service rather than a CLI

## Facets
- artifact type: cli-tool
- maturity: abandoned
- function: osint, security, web-scraping, cli
- domain: security, osint, cloud-computing, developer-tools
- platform: python, cli, windows
- tags: s3-buckets, certificate-transparency, certstream, red-team, reconnaissance, aws, cybersecurity, linux, macos

## Member repositories
- eth0izzle/bucket-stream (main) score 36

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:39.268088+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:21:22.586315+00:00, confidence not recorded.
  - readme: https://github.com/eth0izzle/bucket-stream (fetched 2026-08-28T04:05:39.268088+00:00, sha f31c85166e96)
  - homepage: https://www.darkport.co.uk (fetched 2026-08-29T11:00:23.331743+00:00, sha 25170f71b6bf)
- Data as of 2026-08-30T08:39:29.467469+00:00.