GCPBucketBrute

SauronEye helps in identifying files containing sensitive data such as passwords through targeted directory searches.

This script is designed to enumerate Google Storage buckets, evaluate the level of access you have to them, and analyze whether there is potential for privilege escalation.

This script can optionally accept GCP user or service account credentials along with a specified keyword. Using the provided keyword, a list of permutations will be created. These permutations will then be utilized to check for the existence of Google Storage buckets that match those names. If credentials are provided, most of the enumeration will still occur without authentication. However, for any bucket that is found through unauthenticated enumeration, the script will attempt to gather the bucket's permissions using the TestIamPermissions API with the supplied credentials.

This will assist in locating buckets that can be accessed while authenticated, but not when unauthenticated. Whether credentials are provided or not, the script will attempt to enumerate the bucket permissions using the TestIamPermissions API while unauthenticated.

This means that if you do not enter your credentials, you will only see the privileges available to an unauthenticated user. However, if you do provide your credentials, you will be able to view the access rights that authenticated users have in comparison to those of unauthenticated users. WARNING: If you provide credentials, the script will attempt to authenticate with Google Cloud Platform using them. Please ensure that you possess the necessary permissions and credentials to effectively use this script.