GCPBucketBrute

python gcpbucketbrute.py -k <keyword>

Brute-forcing Google Cloud Storage bucket names from keywords to find open buckets with sensitive data.

Run it during the reconnaissance phase: with the company name (corp, corp-backup, corp-public) you look for misconfigured buckets. It's active OSINT: no credentials needed and there are still buckets with public listing due to legacy configurations.

It's noisy: thousands of requests to storage.googleapis.com from your IP and Google may throttle you. Open buckets are increasingly rare (the default configuration is now private). For already known buckets, try directly with gsutil.