Alternatives and similar repositories for smogcloud

Users that are interested in smogcloud are comparing it to the libraries listed below

• BishopFox / dufflebag
  Search exposed EBS volumes for secrets
  ☆297Updated 2 years ago
• appsecco / attacking-cloudgoat2
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.
  ☆134Updated 5 years ago
• cr0hn / festin
  FestIn - Open S3 Bucket Scanner
  ☆234Updated 4 years ago
• koenrh / s3enum
  Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.
  ☆251Updated 2 months ago
• NotSoSecure / cloud-service-enum
  ☆252Updated last year
• josehelps / git-wild-hunt
  A tool to hunt for credentials in github wild AKA git*hunt
  ☆295Updated 2 years ago
• RhinoSecurityLabs / Cloud-Security-Research
  Cloud-related research releases from the Rhino Security Labs team.
  ☆388Updated 5 years ago
• dxa4481 / truffleHogRegexes
  These are the regexes that power truffleHog
  ☆217Updated 2 years ago
• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆526Updated 2 years ago
• Plazmaz / leaky-repo
  Benchmarking repo for secrets scanning
  ☆234Updated 10 months ago
• sudosammy / knary
  A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams/Lark/Telegram & Pushover support
  ☆296Updated 2 months ago
• MindPointGroup / cloudfrunt
  A tool for identifying misconfigured CloudFront domains
  ☆360Updated 5 years ago
• nielsing / yar
  Yar is a tool for plunderin' organizations, users and/or repositories.
  ☆238Updated 4 years ago
• opendevsecops / guide-aws-hacking
  This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS wea…
  ☆172Updated 6 years ago
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆178Updated 2 years ago
• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆139Updated 3 years ago
• riskprofiler / CloudFrontier
  Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Clo…
  ☆126Updated last year
• tprynn / web-methodology
  Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki
  ☆209Updated 8 months ago
• magoo / ato-checklist
  A checklist of practices for organizations dealing with account takeover (ATO)
  ☆269Updated 9 months ago
• AvasDream / pentesting-dockerfiles
  Pentesting/Bugbounty Dockerfiles.
  ☆177Updated 4 years ago
• lanrat / certgraph
  An open source intelligence tool to crawl the graph of certificate Alternate Names
  ☆353Updated last year
• Voulnet / barq
  barq: The AWS Cloud Post Exploitation framework!
  ☆387Updated 2 years ago
• PaperMtn / gitlab-watchman
  Finding exposed secrets and personal data in GitLab
  ☆199Updated 7 months ago
• RhinoSecurityLabs / ccat
  Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
  ☆633Updated 5 years ago
• N0MoreSecr3ts / wraith
  Uncover forgotten secrets and bring them back to life, haunting security and operations teams.
  ☆207Updated 2 years ago
• detectify / ugly-duckling
  Ugly Duckling is a lightweight scanner built specifically for our Crowdsource community to submit proof-of-concept modules
  ☆188Updated 3 years ago
• iknowjason / AriaCloud
  A Docker container for remote penetration testing.
  ☆135Updated 4 years ago
• allyomalley / dnsobserver
  A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for…
  ☆192Updated 4 years ago
• proabiral / inception
  A highly configurable Framework for easy automated web scanning
  ☆376Updated 5 years ago
• Santandersecurityresearch / corsair_scan
  Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).
  ☆122Updated 2 years ago