EricZimmerman / EricZimmerman/Issues

Dangling B2 bucket reference — ShellBags Explorer download link

Open
#247 5 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
14
Forks
3
PR merge metrics
No merged PRs in 30d

Description

reference — ShellBags Explorer download link

**Summary**
The direct download link for ShellBags Explorer via Backblaze B2
appears to point to a bucket that no longer exists:

`https://f001.backblazeb2.com/file/EricZimmermanTools/ShellBagsExplorer.zip`

Requesting this URL returns:

​```json
{
"code": "not_found",
"message": "Bucket with such name does not exist.",
"status": 404
}
​```

**Why this matters**
When testing (without completing registration or entering real
payment details), the bucket name `EricZimmermanTools` did not
trigger a name-conflict error during bucket creation on B2 — the
flow only stopped at the billing step. This suggests the name may
currently be unclaimed and could potentially be re-registered by
an unrelated third party.

If that happens, any legacy link, script, or documentation still
pointing to this bucket could end up serving content from an
unauthorized source instead of the original tool — a supply-chain
risk given this toolset's use in forensic investigations.

**What I've done**
I've already submitted a responsible disclosure report to
Backblaze's security team (`security@backblaze.com`) with full
technical details and screenshots. Happy to share that report here
too if useful.

**Suggested action**
Worth confirming whether current official download links still
rely on this bucket, and updating any references if they're
outdated (e.g. pointing users to the GitHub Releases page instead).

Thanks for all the great tools — just wanted to flag this in case
it's relevant.

Contributor guide

No contributing guide indexed for this repository

Research direction

Search the repository and official download references for ShellBags Explorer, starting with the Backblaze B2 URL in the issue. Verify whether current links still use that bucket and compare them with the GitHub Releases page; done means outdated references are identified and updated or confirmed as current.

Written by the indexing model from the issue text.

Assessment

Tech stack
github
Domain
release, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
58/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.