BishopFox / dufflebagLinks
Search exposed EBS volumes for secrets
β302Updated 2 years ago
Alternatives and similar repositories for dufflebag
Users that are interested in dufflebag are comparing it to the libraries listed below
Sorting:
- Find cloud assets that no one wants exposed π βοΈβ350Updated 5 years ago
- Cloud-related research releases from the Rhino Security Labs team.β392Updated 5 years ago
- β259Updated last year
- This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS weaβ¦β174Updated 6 years ago
- A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.β550Updated 2 years ago
- A step-by-step walkthrough of CloudGoat 2.0 scenarios.β134Updated 5 years ago
- Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.β262Updated 3 weeks ago
- S3 Account Searchβ32Updated 5 months ago
- These are tools we released with our 2020 defcon/blackhat talk https://www.youtube.com/watch?v=Ml09R38jpokβ172Updated 11 months ago
- A Docker container for remote penetration testing.β141Updated 4 years ago
- FestIn - Open S3 Bucket Scannerβ232Updated 5 years ago
- IAMFinder enumerates and finds users and IAM roles in a target AWS account.β111Updated 5 years ago
- Unauthenticated enumeration of AWS, Azure, and GCP Principalsβ278Updated last month
- Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpointsβ122Updated 5 months ago
- WeirdAAL (AWS Attack Library)β833Updated 11 months ago
- Red Team Scripts for AWS.β170Updated 5 years ago
- A tool to hunt for credentials in github wild AKA git*huntβ297Updated 3 years ago
- An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share thβ¦β204Updated 4 years ago
- These are the regexes that power truffleHogβ222Updated 3 years ago
- β139Updated 2 years ago
- AWS S3 Bucket/Object Finderβ122Updated 4 years ago
- barq: The AWS Cloud Post Exploitation framework!β387Updated 3 years ago
- A tool for identifying misconfigured CloudFront domainsβ362Updated 5 years ago
- Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspaceβ772Updated 11 months ago
- LinkedIn reconnaissance toolβ55Updated 4 years ago
- A utility to convert your AWS CLI credentials into AWS console access.β251Updated 5 years ago
- Cloud Security Operations Orchestratorβ188Updated last year
- Serverless Functions for establishing Reverse Shells to Lambda, Azure Functions, and Google Cloud Functionsβ250Updated 5 months ago
- Hands-On AWS Penetration Testing with Kali Linux published by Packtβ135Updated 2 years ago
- A tool geared towards pentesting APIs using OpenAPI definitions.β183Updated 3 years ago