Which tool is used to identify open S3 buckets and retrieve their content?

• A. Nmap
• B. Nessus
• C. Burp Suite
• D. S3Scanner

Answer: (D)

This question tests knowledge of tools used for discovering publicly accessible AWS S3 buckets and their contents. S3Scanner is built specifically to identify open S3 buckets and, when permissions allow, retrieve the objects inside. It automates bucket existence checks and access testing, making it the most suitable choice for this task.

Other tools serve broader or different purposes: Nmap focuses on network and port discovery, Nessus is a vulnerability scanner for hosts and services, and Burp Suite targets web application testing and traffic analysis. None of them are specialized for enumerating S3 buckets or pulling bucket contents, so they aren’t the best fit here.