A tool for identifying misconfigured CloudFront domains
☆360Jun 24, 2020Updated 6 years ago
Alternatives and similar repositories for cloudfrunt
Users that are interested in cloudfrunt are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Route53/CloudFront Vulnerability Assessment Utility☆87Sep 11, 2023Updated 3 years ago
- WeirdAAL (AWS Attack Library)☆843Jan 13, 2025Updated last year
- A collection of AWS penetration testing junk☆1,225Aug 30, 2023Updated 3 years ago
- A simple file-based scanner to look for potential AWS access and secret keys in files☆95Mar 18, 2024Updated 2 years ago
- ☆126Sep 2, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Security Tool to Look For Interesting Files in S3 Buckets☆1,470Apr 10, 2024Updated 2 years ago
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆117Mar 29, 2019Updated 7 years ago
- CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.☆536Mar 7, 2022Updated 4 years ago
- Endpoint for Out-of-Band Exfiltration (DNS & HTTP)☆95Nov 9, 2018Updated 7 years ago
- A Powerful Subdomain Takeover Tool☆967Oct 17, 2023Updated 3 years ago
- Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.☆1,172Dec 8, 2022Updated 3 years ago
- Drupal enumeration & exploitation tool☆617Nov 4, 2020Updated 5 years ago
- Stealing CSRF tokens with CSS injection (without iFrames)☆320Feb 7, 2018Updated 8 years ago
- The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.☆5,383May 19, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆279Oct 19, 2021Updated 5 years ago
- A simple CORS misconfiguration scanner☆423Aug 14, 2020Updated 6 years ago
- Scan for misconfigured S3 buckets across S3-compatible APIs!☆3,179Aug 3, 2026Updated 2 months ago
- Tool to search secrets in various filetypes.☆1,038Apr 25, 2023Updated 3 years ago
- Exploits written by the Rhino Security Labs team☆1,101Jan 23, 2021Updated 5 years ago
- This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtu…☆633Feb 5, 2019Updated 7 years ago
- Enumerate usernames on a domain where you have no creds by using SMB Relay with low priv.☆400May 20, 2020Updated 6 years ago
- Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.☆182Jul 30, 2019Updated 7 years ago
- Security auditing tool for AWS environments☆1,717Nov 28, 2018Updated 7 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account ha…☆501Aug 7, 2020Updated 6 years ago
- Enumerate the permissions associated with AWS credential set☆1,263Feb 5, 2024Updated 2 years ago
- This tests a list of s3 buckets to see if they have dir listings enabled or if they are uploadable☆55Dec 10, 2025Updated 10 months ago
- AWS Extender (Cloud Storage Tester) is a Burp plugin to assess permissions of cloud storage containers on AWS, Google Cloud and Azure.☆256Feb 23, 2022Updated 4 years ago
- Automatically identify deserialisation issues in Java and .NET applications by using active and passive scans☆582Sep 7, 2021Updated 5 years ago
- DNS Takeover tool written in Go☆2,127Oct 21, 2026Updated last week
- A tool to capture all the git secrets by leveraging multiple open source git searching tools☆1,148Jun 25, 2019Updated 7 years ago
- SMB MiTM tool with a focus on attacking clients through file content swapping, lnk swapping, as well as compromising any data passed over…☆381Aug 17, 2018Updated 8 years ago
- Perform a MitM attack and extract clear text credentials from RDP connections☆1,457Nov 20, 2025Updated 11 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Checks using a test string if a Cloudflare DNS bypass is possible using CloudFail.☆48Dec 17, 2020Updated 5 years ago
- Password spraying using AWS Lambda for IP rotation☆671Feb 14, 2023Updated 3 years ago
- A Tool for Domain Flyovers☆5,956May 22, 2022Updated 4 years ago
- Find interesting Amazon S3 Buckets by watching certificate transparency logs.☆1,818Feb 28, 2025Updated last year
- Password Lense: reveal character types in a password☆23Oct 18, 2025Updated last year
- Fetch all public IP addresses tied to your AWS account. Works with IPv4/IPv6, Classic/VPC networking, and across all AWS services☆643Apr 29, 2021Updated 5 years ago
- Remote Recon and Collection☆461Nov 23, 2017Updated 8 years ago