# UzJu/Cloud-Bucket-Leak-Detection-Tools

六大云存储，泄露利用检测工具

Repository: https://github.com/UzJu/Cloud-Bucket-Leak-Detection-Tools
Canonical: https://ross.abutalabs.com/products/cloud-bucket-leak-detection-tools
Language: Python
License: MIT
License Family: permissive
Last push: 2025-03-28T03:26:04+00:00

## Health v2 (maintenance only)
Score: 29/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 13, release rhythm 8, longevity 100
- inputs: {"age_days": 1653, "days_push": 523, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1266, forks 142 (observed 2026-08-28T04:04:11.121487+00:00)

## What it is
A Python CLI tool that detects misconfigured and leaked cloud storage buckets across six major cloud providers including Aliyun, Tencent Cloud, Huawei Cloud, and AWS. It can check bucket permissions, detect leaks, and automatically take over deleted or non-existent buckets.

## Use cases
- check if my cloud storage bucket is publicly exposed
- scan a list of aliyuncs.com bucket URLs for leaks
- detect misconfigured AWS S3 bucket permissions
- take over a dangling cloud bucket that no longer exists
- audit object storage security across multiple cloud providers
- batch scan buckets found via fofa for misconfigurations

## When to choose
- you need to audit cloud object storage buckets across Chinese cloud providers like Aliyun, Tencent, or Huawei
- you want a single CLI tool covering multiple cloud vendors' bucket misconfigurations
- you are doing authorized security assessment of cloud storage exposure

## When to avoid
- you need a continuous cloud security posture management platform rather than on-demand scanning
- you only use cloud providers not covered by the tool
- you lack authorization to test the target buckets - unauthorized use is illegal

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: security, vulnerability-scanning, penetration-testing, cli
- domain: security, cloud-computing, penetration-testing, developer-tools
- platform: cli, python, windows
- tags: cloud-storage, bucket-misconfiguration, object-storage, aliyun, tencent-cloud, huawei-cloud, aws-s3, offensive-security, reconnaissance, linux, macos

## Member repositories
- UzJu/Cloud-Bucket-Leak-Detection-Tools (main) score 29

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:11.121487+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T05:03:45.914292+00:00, confidence not recorded.
  - readme: https://github.com/UzJu/Cloud-Bucket-Leak-Detection-Tools (fetched 2026-08-28T04:04:11.121487+00:00, sha b02d4a0dcc62)
- Data as of 2026-08-30T08:39:29.467469+00:00.