Using Censys to Find Misconfigured S3
ID: 915810ac-65ce-56c7-afa4-b614902d8489
STIX ID: report--915810ac-65ce-56c7-afa4-b614902d8489
Feed Name: Censys Blog
Date Published: 2023-01-03
Date Updated: 2026-04-27
Author: Brenda Mendoza; Mark Ellzey; Senior Security Researcher
This Censys research report demonstrates a method to discover Amazon S3 bucket names by parsing HTTP response bodies and feeding results into S3Scanner; in under an hour the author identified 7,640 potential S3 targets and found 49 buckets with full anonymous control, 16 allowing anonymous writes, 1,235 world-readable buckets, and additional buckets with ACP read/write exposures. The document details the query and tooling workflow used, provides aggregated results, and highlights the prevalence and risk of S3 misconfiguration.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.