Alternatives and similar repositories for dufflebag:

Users that are interested in dufflebag are comparing it to the libraries listed below

• BishopFox / smogcloud
  Find cloud assets that no one wants exposed 🔎 ☁️
  ☆334Updated 4 years ago
• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆495Updated last year
• WeAreCloudar / s3-account-search
  S3 Account Search
  ☆256Updated 3 months ago
• prisma-cloud / IAMFinder
  IAMFinder enumerates and finds users and IAM roles in a target AWS account.
  ☆109Updated 4 years ago
• NotSoSecure / cloud-service-enum
  ☆238Updated 7 months ago
• appsecco / attacking-cloudgoat2
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.
  ☆135Updated 4 years ago
• RhinoSecurityLabs / Cloud-Security-Research
  Cloud-related research releases from the Rhino Security Labs team.
  ☆377Updated 4 years ago
• dxa4481 / gcploit
  These are tools we released with our 2020 defcon/blackhat talk https://www.youtube.com/watch?v=Ml09R38jpok
  ☆170Updated 2 years ago
• brianwarehime / inSp3ctor
  AWS S3 Bucket/Object Finder
  ☆118Updated 3 years ago
• koenrh / s3enum
  Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.
  ☆240Updated this week
• ImpostorKeanu / peasant
  LinkedIn reconnaissance tool
  ☆50Updated 3 years ago
• Frichetten / SneakyEndpoints
  Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints
  ☆113Updated last year
• righteousgambit / quiet-riot
  Unauthenticated enumeration of AWS, Azure, and GCP Principals
  ☆213Updated 2 months ago
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆172Updated 2 years ago
• ihamburglar / Redboto
  Red Team Scripts for AWS.
  ☆166Updated 4 years ago
• iknowjason / edge
  Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
  ☆164Updated 3 months ago
• NetSPI / aws_consoler
  A utility to convert your AWS CLI credentials into AWS console access.
  ☆231Updated 4 years ago
• disruptops / cred_scanner
  A simple file-based scanner to look for potential AWS access and secret keys in files
  ☆89Updated 10 months ago
• cr0hn / festin
  FestIn - Open S3 Bucket Scanner
  ☆230Updated 4 years ago
• opendevsecops / guide-aws-hacking
  This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS wea…
  ☆169Updated 5 years ago
• SygniaLabs / security-cloud-scout
  ☆133Updated last year
• Santandersecurityresearch / corsair_scan
  Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).
  ☆123Updated last year
• iknowjason / AriaCloud
  A Docker container for remote penetration testing.
  ☆133Updated 3 years ago
• carnal0wnage / weirdAAL
  WeirdAAL (AWS Attack Library)
  ☆794Updated 2 weeks ago
• dxa4481 / truffleHogRegexes
  These are the regexes that power truffleHog
  ☆215Updated 2 years ago
• josehelps / git-wild-hunt
  A tool to hunt for credentials in github wild AKA git*hunt
  ☆293Updated 2 years ago
• duo-labs / secret-bridge
  Monitors Github for leaked secrets
  ☆194Updated 3 months ago
• shabarkin / aws-enumerator
  The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testin…
  ☆194Updated 2 years ago
• moloch-- / burp-multiplayer
  Burp with Friends
  ☆100Updated 2 years ago
• MindPointGroup / cloudfrunt
  A tool for identifying misconfigured CloudFront domains
  ☆348Updated 4 years ago