cr0hn / festin
FestIn - Open S3 Bucket Scanner
☆231Updated 4 years ago
Alternatives and similar repositories for festin:
Users that are interested in festin are comparing it to the libraries listed below
- Find cloud assets that no one wants exposed 🔎 ☁️☆338Updated 4 years ago
- Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.☆245Updated last week
- The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testin…☆198Updated 2 years ago
- Search exposed EBS volumes for secrets☆297Updated last year
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆138Updated 3 years ago
- Weaponizing Live CT logs for automated monitoring of assets☆133Updated 3 years ago
- Tools to assess DNS security.☆152Updated last year
- Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.☆269Updated 6 months ago
- BurpSuite Extension: A one-stop pen testing checklist and logger tool☆265Updated 2 years ago
- S3 Account Search☆269Updated 5 months ago
- automated web assets enumeration & scanning [DEPRECATED]☆288Updated 2 years ago
- ☆244Updated 8 months ago
- Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used t…☆194Updated 11 months ago
- Scan DockerHub images that match a keyword to find secrets.☆55Updated 4 years ago
- A projectdiscovery driven attack surface monitoring bot powered by axiom☆181Updated 2 years ago
- Tools to assess the DNS security of web applications☆127Updated 2 years ago
- ☆124Updated 8 months ago
- Uncover forgotten secrets and bring them back to life, haunting security and operations teams.☆207Updated last year
- AWS S3 Bucket/Object Finder☆119Updated 3 years ago
- WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted se…☆156Updated 11 months ago
- GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…☆205Updated last year
- 🏰 A Python script for AWS S3 bucket enumeration.☆141Updated 2 years ago
- Prototype pollution scanner using headless chrome☆216Updated 2 years ago
- Cross Origin Resource Sharing MisConfiguration Scanner☆172Updated 3 years ago
- A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.☆508Updated last year
- GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations☆381Updated 2 years ago
- openrisk is a tool that generates a risk score based on the results of a Nuclei scan.☆167Updated last month
- You can read the writeup on this script here☆193Updated 3 years ago
- Unauthenticated enumeration of AWS, Azure, and GCP Principals☆222Updated 4 months ago
- Get related domains / subdomains by looking at Google Analytics IDs☆243Updated 2 years ago