gobucket bruteforce
Bruteforce object keys when listing is blocked
gobucket bruteforce <bucket-url> [flags]Options
--access-key string Access key for signed auth
--auth-mode string Auth mode: auto|none|sigv4 (default "auto")
--burst int Rate limiter burst size (default 10)
--concurrency int Max concurrency (default 8)
--extensions string Bruteforce extension expansion CSV
--format string Output format: found|json|jsonl (default "found")
--header stringArray Custom header (K:V), repeatable
-h, --help help for bruteforce
--insecure Allow insecure TLS
--max-memory string Global memory budget (default "250MB")
--method string Bruteforce method: HEAD|GET (default "HEAD")
--rate-limit float Requests per second (0 is unlimited)
--region string Auth region (default "us-east-1")
--secret-key string Secret key for signed auth
--session-token string Session token for signed auth
--status-codes string CSV status codes treated as hits (default "200,206,301,302,403")
--timeout duration Global timeout (default 15s)
--user-agent string HTTP User-Agent (default "gobucket/dev")
--wordlist string Bruteforce wordlist pathSee Also
- gobucket - S3-compatible bucket dumper/analyzer