FestIn
FestIn discovers open S3 buckets associated with a domain using crawling and DNS reconnaissance techniques.
Exposure & Vulnerability ManagementExternal Attack Surface ManagementOn-PremisesStartup · SMB · Mid-Market · EnterpriseFree230
FestIn discovers open S3 buckets associated with a domain using crawling and DNS reconnaissance techniques.
Checked October 2026.
FestIn is a domain-based S3 bucket discovery tool that identifies open Amazon S3 buckets through multiple reconnaissance techniques.
The tool performs comprehensive testing and information gathering from various sources including DNS records, web pages through crawling, and S3 bucket configurations such as redirections.
FestIn employs multiple discovery methods including web crawling and DNS crawling to locate potentially exposed S3 buckets associated with a target domain.
The tool systematically examines DNS infrastructure and web content to identify S3 bucket references and configurations that may indicate security misconfigurations or exposed storage resources.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about FestIn: features, pricing and alternatives.
FestIn is a product in the External Attack Surface Management category. It covers Reconnaissance, Security Scanning and S3.
FestIn is free. Download and setup instructions are at https://github.com/cr0hn/festin/.
Alternatives to FestIn listed on CybersecTools:
Compare all FestIn alternatives at https://cybersectools.com/alternatives/festin
FestIn is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Internet-wide scanning platform for discovering exposed devices, services
External attack surface management platform for asset discovery and monitoring
A multi-cloud DNS security tool that detects dangling DNS records and potential subdomain takeover vulnerabilities by scanning cloud infrastructure and DNS zones.
A domain reconnaissance tool that automates subdomain discovery, port scanning, and monitoring with support for multiple data sources and notification integrations.
ASM platform for discovering, monitoring, and prioritizing external/internal assets
On our shortlist?
FestIn is not a pick on the current Best Attack Surface Management Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
