Parasimpaticki / sandcastle
🏰 A Python script for AWS S3 bucket enumeration.
☆54Updated 4 years ago
Alternatives and similar repositories for sandcastle:
Users that are interested in sandcastle are comparing it to the libraries listed below
- Scan for and exploit Consul agents☆40Updated 5 years ago
- Zone transfers for rwhois☆20Updated 6 years ago
- Monitoring GitHub for sensitive data shared publicly☆66Updated 3 years ago
- retrive metadata endpoint data with these one liners.☆38Updated 4 years ago
- A tool to evaluate Content Security Policies.☆70Updated 4 years ago
- Ruby command-line interface to Burp Suite's REST API☆59Updated 5 years ago
- badbucket checks your s3 bucket for common misconfigurations☆23Updated 7 years ago
- AWS Extender CLI is a command-line script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common mi…☆82Updated 4 years ago
- Automating Jenkins Hacking using Shodan API☆94Updated 7 years ago
- Terraform configuration to build a Burp Private Collaborator Server☆25Updated 7 years ago
- Amazon S3 bucket spelunking!☆86Updated 7 years ago
- A tool for automatically gathering sensitive information from exposed Jenkins servers☆103Updated 2 years ago
- Scans a list of websites for Cloudfront or S3 Buckets☆104Updated 3 years ago
- A collection of useful scripts for penetration testers☆82Updated 12 years ago
- Burp Extension for AWS Signing☆88Updated 3 months ago
- A git submodule list containing all the tools repo's you'll ever need.☆27Updated 5 years ago
- OAuth Security Cheatsheet☆39Updated 10 years ago
- A simple remote scanner for Liferay Portal☆18Updated last week
- A penetration testing tool to enumerate and analyse Amazon S3 Buckets owned by a domain.☆111Updated 6 years ago
- Hayat is a script for report and analyze Google Cloud Platform resources.☆80Updated 5 years ago
- AWS S3 Sensitive Data Search☆36Updated 3 years ago
- PHP tool to test XSS☆22Updated 5 years ago
- A collection of slides, videos, and proof-of-concept scripts from various Rhino presentations.☆38Updated 6 years ago
- A collection of scripts that I've written while pentesting.☆31Updated 6 years ago
- Generate MS Word template-based reports with HP WebInspect / Burp Suite Pro input, own custom data and knowledge base.☆66Updated last year
- A simple file-based scanner to look for potential AWS access and secret keys in files☆91Updated last year
- This repository holds a target infrastructure you can use for running the nimbostratus tools.☆23Updated 10 years ago
- A collection of scripts used to interact with the Burp Rest API☆51Updated 6 years ago
- Endpoint for Out-of-Band Exfiltration (DNS & HTTP)☆92Updated 6 years ago
- Docker Pentest Lists are collection of Dockerfiles or Links to Dockerfiles for containers used in Penetration Tests☆21Updated 7 years ago