FestIn

FestIn is an open S3 bucket scanner. It finds exposed data before someone else does.

Amazon S3 is great, but people misconfigure it, badly. I’ve seen complete databases, confidential documents and unencrypted backups, all out in the open.

What it does

• Scans S3 buckets for insecure configurations.
• Detects publicly exposed data.
• Identifies incorrect permissions.
• Generates detailed reports.

A true story

Once, using FestIn, I found a bucket with medical information on millions of people. I told the company and they had a hard time believing it. I saved them a multi-million GDPR fine and they didn’t thank me, but well, karma exists.

It has over 230 stars and security teams around the world use it.