Alternatives and similar repositories for CloudBrute:

Users that are interested in CloudBrute are comparing it to the libraries listed below

• initstring / cloud_enum
  Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.
  ☆1,760Updated 4 months ago
• projectdiscovery / cloudlist
  Cloudlist is a tool for listing Assets from multiple Cloud Providers.
  ☆908Updated this week
• carlospolop / PurplePanda
  Identify privilege escalation paths within and across different clouds
  ☆681Updated 3 months ago
• hakluke / haktrails
  Golang client for querying SecurityTrails API data
  ☆545Updated last year
• iamthefrogy / frogy
  My subdomain enumeration script. It's unique in the way it is built upon.
  ☆676Updated 6 months ago
• R0X4R / Garud
  An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and…
  ☆783Updated last year
• projectdiscovery / chaos-client
  Go client to communicate with Chaos DB API.
  ☆686Updated last week
• BishopFox / eyeballer
  Convolutional neural network for analyzing pentest screenshots
  ☆1,079Updated last year
• j3ssie / metabigor
  OSINT tools and more but without API key
  ☆1,306Updated 10 months ago
• projectdiscovery / shuffledns
  MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering…
  ☆1,381Updated last week
• ayoubfathi / leaky-paths
  A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…
  ☆962Updated 8 months ago
• yeswehack / PwnFox
  PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.
  ☆1,119Updated 6 months ago
• assetnote / commonspeak2
  Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists
  ☆713Updated 2 years ago
• reconmap / reconmap
  Vulnerability assessment and penetration testing automation and reporting platform for teams.
  ☆444Updated 2 months ago
• codingo / Interlace
  Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
  ☆1,234Updated 10 months ago
• PentestPad / subzy
  Subdomain takeover vulnerability checker
  ☆1,151Updated 5 months ago
• knavesec / CredMaster
  Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling
  ☆1,041Updated 6 months ago
• ksharinarayanan / SSRFire
  An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects
  ☆953Updated 3 years ago
• devanshbatham / FavFreak
  Making Favicon.ico based Recon Great again !
  ☆1,155Updated last year
• Dheerajmadhukar / karma_v2
  ⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)
  ☆840Updated 8 months ago
• blacklanternsecurity / TREVORspray
  TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!
  ☆1,118Updated 3 months ago
• hakluke / hakoriginfinder
  Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!
  ☆859Updated last year
• tillson / git-hound
  Reconnaissance tool for GitHub code search. Scans for exposed API keys across all of GitHub, not just known repos and orgs.
  ☆1,267Updated last month
• chvancooten / BugBountyScanner
  A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.
  ☆889Updated last year
• 0xZDH / o365spray
  Username enumeration and password spraying tool aimed at Microsoft O365.
  ☆814Updated 3 months ago
• Hackmanit / Web-Cache-Vulnerability-Scanner
  Web Cache Vulnerability Scanner is a Go-based CLI tool for testing for web cache poisoning. It is developed by Hackmanit GmbH (http://hac…
  ☆934Updated 2 months ago
• PortSwigger / autowasp
  BurpSuite Extension: A one-stop pen testing checklist and logger tool
  ☆265Updated last year
• m8sec / subscraper
  Subdomain and target enumeration tool built for offensive security testing
  ☆853Updated 8 months ago
• xnl-h4ck3r / xnLinkFinder
  A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target
  ☆1,262Updated this week
• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆503Updated last year