Grayhat Warfare Buckets
Operator: Operator not identified
Search engine for file names and paths in publicly accessible cloud storage.
Documents & Files
Product
Buckets by GrayhatWarfare
Availability and source date
Active
As of: 16 October 2026.
No functionality test has been performed.
Use in OSINT research
Finds publicly discoverable files in cloud storage using terms and bucket names. The search covers file names and paths, not the text inside files.
Queries
| Input | Result | Result type |
|---|---|---|
| Keyword / free text | Files with matching terms in the file name or full path; bucket names can also be searched. | Retrieved |
| URL | File list for a bucket selected by its URL, available through the API. | Retrieved |
Features
- Searches file names, full paths and bucket names.
- Filters by file extension, cloud provider, size and modification date.
- Excludes terms or individual buckets from the search.
- Saves searches and reports new results on paid plans.
- Provides results and bucket data through a REST API.
Categories
- Documents & Files
- Cloud storage
Coverage
Dataset
Index of publicly accessible buckets on AWS, Azure, DigitalOcean, Google Cloud and Alibaba Cloud. The provider states that Premium covers around 18 billion files; sensitive buckets can be removed on request.
Access
Requirements
Limited web search is available without an account. Registration extends results lists and provides an API key. Premium expands the dataset and filters.
Export
API responses in JSON. Premium allows bucket file lists of up to 5 million rows to be exported, and Enterprise up to 10 million; the pricing page does not state the export format.
Provider
Unknown
Country of establishment
Unknown
Interfaces
API
Available. REST API with an API key, available from the free account tier. Plan limits also apply to API queries; up to 1,000 records per page. The Scrolling API is reserved for Enterprise.
MCP
Not documented. Not stated on the product page, in the FAQ or in the API documentation.
AI agents
Not documented. Not stated on the product page, in the FAQ or in the API documentation.
Usage note
Section 5.3 of the terms prohibits automated access without separate permission; the provider also documents its API with an account key.
Legal note
Publicly accessible files are not automatically licensed for reuse; take particular care with personal and confidential content.
Limitations
- The search indexes file names and paths, not the text inside files.
- Free accounts can access a smaller index and shorter results lists.
- Shorteners and Git are separate search products from GrayhatWarfare.
Guides and practical reports
Official · Buckets API V2: Queries and filters
GrayhatWarfare · EN
Explains authentication, search parameters, response fields and plan limits.