🏰 A Python script for AWS S3 bucket enumeration.
☆54Apr 24, 2020Updated 5 years ago
Alternatives and similar repositories for sandcastle
Users that are interested in sandcastle are comparing it to the libraries listed below
Sorting:
- 一些Java RASP demo☆11Sep 26, 2019Updated 6 years ago
- Exploitation Script for CVE-2020-0688 "Microsoft Exchange default MachineKeySection deserialize vulnerability"☆11Apr 1, 2020Updated 5 years ago
- ☆44Oct 20, 2017Updated 8 years ago
- Scrape/Parse Pastebin using GO and expression grammar (PEG)☆97Dec 10, 2024Updated last year
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆116Mar 29, 2019Updated 6 years ago
- Translate curl commands to Python and JavaScript code☆41Mar 4, 2026Updated 2 weeks ago
- This plugin provides native logstash instrumentation for monitoring, including: a handler for sending events to logstash.☆10Apr 28, 2021Updated 4 years ago
- Github action for linting AWS IAM policy documents☆38Jan 20, 2023Updated 3 years ago
- The original AWS security enforcer™☆61Mar 6, 2019Updated 7 years ago
- AWS IP region locator. Supports both IPv4 and IPv6.☆25Oct 31, 2024Updated last year
- Dump your EC2 Security Groups as a CSV or JSON file☆71Mar 16, 2023Updated 3 years ago
- NTFSx is a tool for extracting files from an NTFS filesystem that are otherwise inaccessible.☆14Jul 26, 2013Updated 12 years ago
- Core incident handling plugins for aws_ir cli, incident pony, and more.☆21Jul 7, 2018Updated 7 years ago
- Scanner and attack suite for hosts that forward unauthenticated packets via IPIP and GRE protocols. (CVE-2020-10136 CVE-2024-7595)☆11Jan 22, 2025Updated last year
- A simple file-based scanner to look for potential AWS access and secret keys in files☆95Mar 18, 2024Updated 2 years ago
- An python script that use apkleaks to scan the android application over web☆11Jun 2, 2022Updated 3 years ago
- MSFVenom Powershell Stager Encoder & Generator☆15Apr 3, 2021Updated 4 years ago
- AWS Extender CLI is a command-line script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common mi…☆83Apr 22, 2020Updated 5 years ago
- backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script shoul…☆16Aug 10, 2016Updated 9 years ago
- VM demonstration various symlink and hard link attacks against secure boot. See the whitepaper at: https://www.anvilventures.com/blog/def…☆14Aug 11, 2020Updated 5 years ago
- Simple tool to identify and remediate the use of the AWS EC2 IMDSv1.☆15Aug 12, 2021Updated 4 years ago
- quick'n dirty hack to invoke ARM SMC instruction from userland through debugfs☆14Sep 4, 2016Updated 9 years ago
- AWS managed IAM policies☆16Mar 24, 2022Updated 3 years ago
- iOS iBugBazaar: Your mobile appsec playground to Explore, Exploit, Excel☆21Apr 30, 2024Updated last year
- Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Applica…☆535Aug 1, 2018Updated 7 years ago
- Detect userland hooks placed by AV/EDR☆28Sep 4, 2023Updated 2 years ago
- Route53/CloudFront Vulnerability Assessment Utility☆86Sep 11, 2023Updated 2 years ago
- Find interesting Amazon S3 Buckets by watching certificate transparency logs.☆1,802Feb 28, 2025Updated last year
- socat version 2☆10Aug 30, 2012Updated 13 years ago
- an asynchronous target enumeration tool☆246Dec 8, 2022Updated 3 years ago
- CLP Principles by the Liquid Legal Institute☆11Apr 12, 2021Updated 4 years ago
- An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.☆400Mar 24, 2021Updated 4 years ago
- sqlmap_auto_proxy☆15Nov 6, 2019Updated 6 years ago
- Python script to check GitHub accounts for world-editable wiki pages☆21May 8, 2023Updated 2 years ago
- CTF Write-ups☆27Apr 7, 2019Updated 6 years ago
- scan s3 buckets for security issues☆86Aug 7, 2024Updated last year
- Pillage a git repo found in an accessible web root☆61May 17, 2011Updated 14 years ago
- nxdomain subdomain enumeration☆10Jul 17, 2022Updated 3 years ago
- Code for our 2023 IEEE S&P Paper "The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web"☆14Dec 12, 2024Updated last year