cr0hn / festinLinks
FestIn - Open S3 Bucket Scanner
โ233Updated 4 years ago
Alternatives and similar repositories for festin
Users that are interested in festin are comparing it to the libraries listed below
Sorting:
- Find cloud assets that no one wants exposed ๐ โ๏ธโ348Updated 5 years ago
- Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.โ255Updated last month
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raiderโ139Updated 4 years ago
- โ259Updated last year
- Search exposed EBS volumes for secretsโ300Updated 2 years ago
- Weaponizing Live CT logs for automated monitoring ofย assetsโ134Updated 4 years ago
- A step-by-step walkthrough of CloudGoat 2.0 scenarios.โ135Updated 5 years ago
- Monitor the internet attack surface of various public cloud environments. Currently supports AWS, GCP, Azure, DigitalOcean and Oracle Cloโฆโ126Updated last year
- Assorted tools for security-related task for git repositoriesโ59Updated 3 years ago
- Cross Origin Resource Sharing MisConfiguration Scannerโ175Updated 3 years ago
- Uncover forgotten secrets and bring them back to life, haunting security and operations teams.โ208Updated 2 years ago
- BurpSuite Extension: A one-stop pen testing checklist and logger toolโ267Updated 2 years ago
- ๐ฐ A Python script for AWS S3 bucket enumeration.โ145Updated 2 years ago
- Burp Automator - A Burp Suite Automation Tool. It provides a high level CLI and Python interfaces to Burp Suite scanner and can be used tโฆโ249Updated last month
- This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS weaโฆโ172Updated 6 years ago
- Ugly Duckling is a lightweight scanner built specifically for our Crowdsource community to submit proof-of-concept modulesโ188Updated 3 years ago
- Tools to assess DNS security.โ152Updated last year
- Tools to assess the DNS security of web applicationsโ128Updated 2 years ago
- Fetch the details of assets hosted on AWS.โ89Updated last year
- A tool for identifying misconfigured CloudFront domainsโ359Updated 5 years ago
- Pentesting/Bugbounty Dockerfiles.โ177Updated 4 years ago
- Benchmarking repo for secrets scanningโ236Updated last year
- GraphQL security testing toolโ125Updated 3 years ago
- Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).โ122Updated 2 years ago
- Monitoring GitHub for sensitive data shared publiclyโ65Updated 3 years ago
- Scan DockerHub images that match a keyword to find secrets.โ60Updated 4 years ago
- S3 Account Searchโ19Updated 2 months ago
- A phased, evasive Path Traversal + LFI scanning & exploitation tool in Pythonโ199Updated 4 years ago
- A tool geared towards pentesting APIs using OpenAPI definitions.โ181Updated 2 years ago
- A Repository dedicated to creating modular and automated penetration testing frameworks utilizing Jupyter Notebooksโ147Updated 4 years ago