Anonymous Cloud, Configuration and Subdomain Takeover Scanner
Summary: PortSwigger's BApp Store lists a third-party Burp extension by author codewatchorg, version 0.1.14, that performs a passive scan to identify cloud buckets and then tests them for publicly accessible vulnerabilities. The extension looks at all responses, was last updated 17 January 2023, and carries an overall estimated system impact of Low.
What you should know: A passive scanner that flags publicly accessible cloud buckets turns every response Burp sees into a check on whether storage you own is exposed - and PortSwigger states it makes no warranty about third-party extensions' quality or usefulness, so the judgment on what to do with a hit stays with your team.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026