Alternatives and similar repositories for dufflebag

Users that are interested in dufflebag are comparing it to the libraries listed below

• BishopFox / smogcloud
  Find cloud assets that no one wants exposed 🔎 ☁️
  ☆349Updated 5 years ago
• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆539Updated 2 years ago
• RhinoSecurityLabs / Cloud-Security-Research
  Cloud-related research releases from the Rhino Security Labs team.
  ☆392Updated 5 years ago
• appsecco / attacking-cloudgoat2
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.
  ☆135Updated 5 years ago
• NotSoSecure / cloud-service-enum
  ☆259Updated last year
• opendevsecops / guide-aws-hacking
  This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS wea…
  ☆173Updated 6 years ago
• koenrh / s3enum
  Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.
  ☆260Updated 3 months ago
• prisma-cloud / IAMFinder
  IAMFinder enumerates and finds users and IAM roles in a target AWS account.
  ☆111Updated 4 years ago
• josehelps / git-wild-hunt
  A tool to hunt for credentials in github wild AKA git*hunt
  ☆297Updated 2 years ago
• iknowjason / AriaCloud
  A Docker container for remote penetration testing.
  ☆141Updated 4 years ago
• dxa4481 / gcploit
  These are tools we released with our 2020 defcon/blackhat talk https://www.youtube.com/watch?v=Ml09R38jpok
  ☆172Updated 9 months ago
• cr0hn / festin
  FestIn - Open S3 Bucket Scanner
  ☆232Updated 4 years ago
• carnal0wnage / weirdAAL
  WeirdAAL (AWS Attack Library)
  ☆828Updated 10 months ago
• Voulnet / barq
  barq: The AWS Cloud Post Exploitation framework!
  ☆388Updated 2 years ago
• Frichetten / SneakyEndpoints
  Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints
  ☆122Updated 4 months ago
• WeAreCloudar / s3-account-search
  S3 Account Search
  ☆23Updated 3 months ago
• DavidDikker / endgame
  An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share th…
  ☆204Updated 4 years ago
• MindPointGroup / cloudfrunt
  A tool for identifying misconfigured CloudFront domains
  ☆360Updated 5 years ago
• ImpostorKeanu / peasant
  LinkedIn reconnaissance tool
  ☆55Updated 3 years ago
• brianwarehime / inSp3ctor
  AWS S3 Bucket/Object Finder
  ☆122Updated 4 years ago
• righteousgambit / quiet-riot
  Unauthenticated enumeration of AWS, Azure, and GCP Principals
  ☆249Updated last year
• SygniaLabs / security-cloud-scout
  ☆139Updated 2 years ago
• AvasDream / pentesting-dockerfiles
  Pentesting/Bugbounty Dockerfiles.
  ☆177Updated 4 years ago
• N0MoreSecr3ts / wraith
  Uncover forgotten secrets and bring them back to life, haunting security and operations teams.
  ☆209Updated 2 years ago
• RhinoSecurityLabs / ccat
  Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
  ☆643Updated 5 years ago
• pumasecurity / serverless-prey
  Serverless Functions for establishing Reverse Shells to Lambda, Azure Functions, and Google Cloud Functions
  ☆251Updated 3 months ago
• PaperMtn / slack-watchman
  Slack enumeration and exposed secrets detection tool
  ☆392Updated 4 months ago
• emtunc / SlackPirate
  Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
  ☆773Updated 9 months ago
• riskprofiler / CloudFrontier
  Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Clo…
  ☆127Updated last month
• nielsing / yar
  Yar is a tool for plunderin' organizations, users and/or repositories.
  ☆239Updated 4 years ago