BishopFox / smogcloud

Related projects ⓘ

Alternatives and complementary repositories for smogcloud

• BishopFox / dufflebag
  Search exposed EBS volumes for secrets
  ☆286Updated last year
• NotSoSecure / cloud-service-enum
  ☆232Updated 4 months ago
• koenrh / s3enum
  Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.
  ☆227Updated 2 weeks ago
• appsecco / attacking-cloudgoat2
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.
  ☆133Updated 4 years ago
• riskprofiler / CloudFrontier
  Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Clo…
  ☆120Updated 7 months ago
• cr0hn / festin
  FestIn - Open S3 Bucket Scanner
  ☆230Updated 3 years ago
• RhinoSecurityLabs / Cloud-Security-Research
  Cloud-related research releases from the Rhino Security Labs team.
  ☆356Updated 4 years ago
• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆138Updated 3 years ago
• dxa4481 / truffleHogRegexes
  These are the regexes that power truffleHog
  ☆211Updated last year
• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆483Updated last year
• josehelps / git-wild-hunt
  A tool to hunt for credentials in github wild AKA git*hunt
  ☆292Updated last year
• iknowjason / AriaCloud
  A Docker container for remote penetration testing.
  ☆133Updated 3 years ago
• WithSecureLabs / leonidas
  Automated Attack Simulation in the Cloud, complete with detection use cases.
  ☆499Updated this week
• RossGeerlings / webstor
  WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted se…
  ☆151Updated 7 months ago
• AvasDream / pentesting-dockerfiles
  Pentesting/Bugbounty Dockerfiles.
  ☆173Updated 3 years ago
• lc / secretz
  secretz, minimizing the large attack surface of Travis CI
  ☆321Updated 2 years ago
• grines / scour
  ☆125Updated 4 months ago
• MindPointGroup / cloudfrunt
  A tool for identifying misconfigured CloudFront domains
  ☆346Updated 4 years ago
• Santandersecurityresearch / corsair_scan
  Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).
  ☆122Updated last year
• moloch-- / burp-multiplayer
  Burp with Friends
  ☆99Updated last year
• sudosammy / knary
  A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams/Lark/Telegram & Pushover support
  ☆291Updated 3 months ago
• brianwarehime / inSp3ctor
  AWS S3 Bucket/Object Finder
  ☆116Updated 3 years ago
• Abss0x7tbh / bass
  Bass grabs you those "extra resolvers" you are missing out on when performing Active DNS enumeration. Add anywhere from 100-6k resolvers …
  ☆141Updated 7 months ago
• opendevsecops / guide-aws-hacking
  This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS wea…
  ☆168Updated 5 years ago
• WeAreCloudar / s3-account-search
  S3 Account Search
  ☆246Updated last month
• Plazmaz / leaky-repo
  Benchmarking repo for secrets scanning
  ☆229Updated 3 months ago
• Static-Flow / BurpSuite-Team-Extension
  This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …
  ☆252Updated 2 years ago
• prisma-cloud / IAMFinder
  IAMFinder enumerates and finds users and IAM roles in a target AWS account.
  ☆109Updated 4 years ago
• praetorian-inc / trident
  automated password spraying tool
  ☆147Updated 3 years ago