FestIn

Python ⭐ 232 stars

FestIn is an open S3 bucket scanner. It helps you find exposed data before the bad guys do.

Amazon S3 is great. But people misconfigure it. Badly.

I’ve seen everything: complete databases, confidential documents, unencrypted backups… all out in the open.

What does FestIn do?

  • Scans S3 buckets for insecure configurations
  • Detects publicly exposed data
  • Identifies incorrect permissions
  • Generates detailed reports

Real story

Once, using FestIn, I found a bucket with medical information of millions of people. I contacted the company. They had a hard time believing it.

I saved them a multi-million GDPR fine. They didn’t thank me. But well, karma exists.

+230 stars and used by security teams worldwide.