Documentation
gobucket bruteforce

gobucket bruteforce

Bruteforce object keys when listing is blocked

gobucket bruteforce <bucket-url> [flags]

Options

      --access-key string      Access key for signed auth
      --auth-mode string       Auth mode: auto|none|sigv4 (default "auto")
      --burst int              Rate limiter burst size (default 10)
      --concurrency int        Max concurrency (default 8)
      --extensions string      Bruteforce extension expansion CSV
      --format string          Output format: found|json|jsonl (default "found")
      --header stringArray     Custom header (K:V), repeatable
  -h, --help                   help for bruteforce
      --insecure               Allow insecure TLS
      --max-memory string      Global memory budget (default "250MB")
      --method string          Bruteforce method: HEAD|GET (default "HEAD")
      --rate-limit float       Requests per second (0 is unlimited)
      --region string          Auth region (default "us-east-1")
      --secret-key string      Secret key for signed auth
      --session-token string   Session token for signed auth
      --status-codes string    CSV status codes treated as hits (default "200,206,301,302,403")
      --timeout duration       Global timeout (default 15s)
      --user-agent string      HTTP User-Agent (default "gobucket/dev")
      --wordlist string        Bruteforce wordlist path

See Also

  • gobucket - S3-compatible bucket dumper/analyzer