Alternatives and similar repositories for scour:

Users that are interested in scour are comparing it to the libraries listed below

• SygniaLabs / security-cloud-scout
  ☆137Updated 2 years ago
• appsecco / attacking-cloudgoat2
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.
  ☆134Updated 5 years ago
• RhinoSecurityLabs / dsnap
  Utility for downloading and mounting EBS snapshots using the EBS Direct API's
  ☆84Updated last month
• NetSPI / aws_consoler
  A utility to convert your AWS CLI credentials into AWS console access.
  ☆238Updated 4 years ago
• lightspin-tech / red-shadow
  Lightspin AWS IAM Vulnerability Scanner
  ☆96Updated 4 years ago
• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆139Updated 3 years ago
• Frichetten / SneakyEndpoints
  Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints
  ☆114Updated last year
• Frichetten / aws_stealth_perm_enum
  Research on the enumeration of IAM permissions without logging to CloudTrail
  ☆61Updated 3 years ago
• lightspin-tech / red-detector
  Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)
  ☆88Updated 2 years ago
• sebastian-mora / awsssome_phish
  AWS SSO serverless phishing API.
  ☆32Updated 3 years ago
• Static-Flow / CloudCopy
  This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapsho…
  ☆120Updated 5 years ago
• PaperMtn / github-watchman
  Monitoring GitHub for sensitive data shared publicly
  ☆66Updated 3 years ago
• moloch-- / burp-multiplayer
  Burp with Friends
  ☆103Updated 2 years ago
• nccgroup / CollaboratorPlusPlus
  ☆148Updated 3 years ago
• alexivkin / kubepwn
  Kubernetes Pwnage for all
  ☆57Updated 4 years ago
• nccgroup / s3_objects_check
  Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.
  ☆76Updated 3 years ago
• NotSoSecure / cloud-sec-wiki
  Jekyll Files for cloudsecwiki.com
  ☆50Updated 3 years ago
• nccgroup / ConMachi
  Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container
  ☆106Updated 6 years ago
• serain / kubelet-anon-rce
  Executes commands in a container on a kubelet endpoint that allows anonymous authentication (default)
  ☆112Updated 6 years ago
• nccgroup / cowcloud
  ☆57Updated last year
• Santandersecurityresearch / corsair_scan
  Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).
  ☆123Updated 2 years ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 3 years ago
• OWASP / owasp-cstg
  ☆36Updated 4 years ago
• pownjs / git
  Assorted tools for security-related task for git repositories
  ☆59Updated 3 years ago
• WithSecureLabs / cloud-wiki
  A public cloud security knowledgebase - https://www.secwiki.cloud/
  ☆51Updated 5 months ago
• nightwatchcybersecurity / gitbleed_tools
  ☆90Updated 3 years ago
• nccgroup / ccs
  ☆110Updated last year
• mhaskar / Bughound
  Static code analysis tool based on Elasticsearch
  ☆129Updated 4 years ago
• AbstractClass / CloudPrivs
  Determine privileges from cloud credentials via brute-force testing.
  ☆67Updated 8 months ago
• shabarkin / aws-enumerator
  The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testin…
  ☆203Updated 3 years ago