Add Hetzner Object Storage bucket-cataloger module (#1876)

bbot/modules/baddns.py

@@ -53,7 +53,7 @@ class baddns(BaseModule):
         "enabled_submodules": "A list of submodules to enable. Empty list (default) enables CNAME, TXT and MX Only",
     }
     module_threads = 8
-    deps_pip = ["baddns~=2.1.0"]
+    deps_pip = ["baddns~=2.3.0"]
 
     def select_modules(self):
         selected_submodules = []

bbot/modules/baddns_direct.py

@@ -17,7 +17,7 @@ class baddns_direct(baddns_module):
         "min_confidence": "Minimum confidence to emit (UNKNOWN, LOW, MEDIUM, HIGH, CONFIRMED)",
     }
     module_threads = 8
-    deps_pip = ["baddns~=2.1.0"]
+    deps_pip = ["baddns~=2.3.0"]
 
     scope_distance_modifier = 1
 

bbot/modules/baddns_zone.py

@@ -17,7 +17,7 @@ class baddns_zone(baddns_module):
         "min_confidence": "Minimum confidence to emit (UNKNOWN, LOW, MEDIUM, HIGH, CONFIRMED)",
     }
     module_threads = 8
-    deps_pip = ["baddns~=2.1.0"]
+    deps_pip = ["baddns~=2.3.0"]
 
     def set_modules(self):
         self.enabled_submodules = ["NSEC", "zonetransfer"]

bbot/modules/bucket_hetzner.py

@@ -0,0 +1,29 @@
+from bbot.modules.templates.bucket import bucket_template
+
+
+class bucket_hetzner(bucket_template):
+    watched_events = ["DNS_NAME", "STORAGE_BUCKET"]
+    produced_events = ["STORAGE_BUCKET", "FINDING"]
+    flags = ["safe", "active", "slow", "cloud-enum", "web-heavy"]
+    meta = {
+        "description": "Check for Hetzner Object Storage buckets related to target",
+        "created_date": "2026-05-04",
+        "author": "@ChrisJr404",
+    }
+    options = {"permutations": False}
+    options_desc = {
+        "permutations": "Whether to try permutations",
+    }
+
+    cloudcheck_provider_name = "Hetzner"
+    delimiters = ("", "-")
+    base_domains = ["your-objectstorage.com"]
+    # Hetzner Object Storage locations:
+    #   fsn1 - Falkenstein, DE
+    #   nbg1 - Nuremberg, DE
+    #   hel1 - Helsinki, FI
+    # https://docs.hetzner.com/storage/object-storage/overview/
+    regions = ["fsn1", "nbg1", "hel1"]
+
+    def build_url(self, bucket_name, base_domain, region):
+        return f"https://{bucket_name}.{region}.{base_domain}/"

bbot/modules/internal/cloudcheck.py

@@ -73,24 +73,21 @@ async def handle_event(self, event, **kwargs):
         for regex_name, regex in regexes.items():
             for host in hosts_to_check:
                 if match := regex.match(host):
-                    try:
-                        bucket_name, bucket_domain = match.groups()
-                    except Exception as e:
-                        self.error(
-                            f"Bucket regex {regex_name} ({regex}) is not formatted correctly to extract bucket name and domain: {e}"
-                        )
+                    groups = match.groupdict()
+                    bucket_name = groups.get("name")
+                    if not bucket_name:
+                        self.error(f"Bucket regex {regex_name} ({regex.pattern}) did not yield a 'name' group")
                         continue
-                    bucket_name, bucket_domain = match.groups()
-                    bucket_url = f"https://{bucket_name}.{bucket_domain}"
-                    await self.emit_event(
-                        {
-                            "name": bucket_name,
-                            "url": bucket_url,
-                            "context": f"{{module}} analyzed {event.type} and found {{event.type}}: {bucket_url}",
-                        },
-                        "STORAGE_BUCKET",
-                        parent=event,
-                    )
+                    region = groups.get("region")
+                    bucket_url = f"https://{host}"
+                    bucket_data = {
+                        "name": bucket_name,
+                        "url": bucket_url,
+                        "context": f"{{module}} analyzed {event.type} and found {{event.type}}: {bucket_url}",
+                    }
+                    if region:
+                        bucket_data["region"] = region
+                    await self.emit_event(bucket_data, "STORAGE_BUCKET", parent=event)
 
     async def cloud_hostname_regexes(self):
         async with self._cloud_hostname_regexes_lock:

bbot/test/test_step_2/module_tests/test_module_bucket_hetzner.py

@@ -0,0 +1,8 @@
+from .test_module_bucket_amazon import *
+
+
+class TestBucket_Hetzner(Bucket_Amazon_Base):
+    provider = "hetzner"
+    random_bucket_1 = f"{random_bucket_name_1}.fsn1.your-objectstorage.com"
+    random_bucket_2 = f"{random_bucket_name_2}.nbg1.your-objectstorage.com"
+    random_bucket_3 = f"{random_bucket_name_3}.fsn1.your-objectstorage.com"

pyproject.toml

@@ -48,7 +48,7 @@ dependencies = [
     "orjson>=3.10.12,<4",
     "ansible-core>=2.17,<3",
     "tldextract>=5.3.0,<6",
-    "cloudcheck>=9.2.0,<10",
+    "cloudcheck>=10.0.0,<11",
     "blastdns>=1.9.0,<2",
 ]
 
@@ -78,7 +78,7 @@ dev = [
     "fastapi>=0.115.5,<0.137.0",
     "pytest-httpx>=0.35",
     "pytest-benchmark>=4,<6",
-    "baddns~=2.1.0",
+    "baddns~=2.3.0",
     "ruff==0.15.12",
 ]
 docs = [