<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Cloud Infrastructure Reconnaissance

## AWS S3

### Check Bucket (Unauthenticated)
```bash
aws s3 ls s3://bucket-name --no-sign-request
```

### Check ACL
```bash
aws s3api get-bucket-acl --bucket bucket-name --no-sign-request
```

### HTTP Check
```bash
curl -sI "https://bucket-name.s3.amazonaws.com/"
```

## Azure Blob Storage

### List Container
```bash
curl -s "https://account.blob.core.windows.net/container?restype=container&comp=list"
```

### Check Existence
```bash
curl -sI "https://account.blob.core.windows.net/\$web?restype=container"
```

## GCP Storage

### HTTP Check
```bash
curl -s "https://storage.googleapis.com/bucket-name/"
```

### gsutil (Unauthenticated)
```bash
gsutil ls gs://bucket-name/ 2>&1
```

## GrayHatWarfare API

### Search Files
```bash
curl -s "https://buckets.grayhatwarfare.com/api/v2/files?keywords=target&access_token=$GHW_KEY"
```

### Search Buckets
```bash
curl -s "https://buckets.grayhatwarfare.com/api/v2/buckets?keywords=target&access_token=$GHW_KEY"
```

## cloud_enum

### Multi-Cloud Scan
```bash
cloud_enum -k target -k targetcorp -l results.log
```

### Disable Providers
```bash
cloud_enum -k target --disable-gcp --disable-azure
```

## S3Scanner

### Scan Buckets
```bash
s3scanner scan --bucket-file wordlist.txt --dump-open
```

## CloudBrute

### Brute-Force
```bash
CloudBrute -d target.com -k target -w wordlist.txt -c 50 -T 10
```

## Nuclei Cloud Templates

### Misconfiguration Scan
```bash
nuclei -l urls.txt -t http/misconfiguration/cloud/ -silent -json
```

## Environment Variables

| Variable | Description |
|----------|-------------|
| `AWS_ACCESS_KEY_ID` | AWS access key (for authenticated scans) |
| `AWS_SECRET_ACCESS_KEY` | AWS secret key |
| `GHW_KEY` | GrayHatWarfare API key |
