grines / scour

Related projects ⓘ

Alternatives and complementary repositories for scour

• DigeeX / raider
  DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider
  ☆138Updated 3 years ago
• NetSPI / aws_consoler
  A utility to convert your AWS CLI credentials into AWS console access.
  ☆220Updated 4 years ago
• Frichetten / SneakyEndpoints
  Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints
  ☆113Updated last year
• Frichetten / aws_stealth_perm_enum
  Research on the enumeration of IAM permissions without logging to CloudTrail
  ☆60Updated 3 years ago
• securisec / cliam
  Cloud agnostic IAM permissions enumerator
  ☆139Updated 2 months ago
• appsecco / attacking-cloudgoat2
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.
  ☆133Updated 4 years ago
• nccgroup / cowcloud
  ☆58Updated last year
• SygniaLabs / security-cloud-scout
  ☆133Updated last year
• nccgroup / s3_objects_check
  Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.
  ☆74Updated 2 years ago
• moloch-- / burp-multiplayer
  Burp with Friends
  ☆99Updated last year
• righteousgambit / quiet-riot
  Unauthenticated enumeration of AWS, Azure, and GCP Principals
  ☆203Updated last week
• nccgroup / ConMachi
  Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container
  ☆102Updated 5 years ago
• lightspin-tech / red-shadow
  Lightspin AWS IAM Vulnerability Scanner
  ☆96Updated 3 years ago
• stephenbradshaw / aws_url_signer
  POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
  ☆58Updated last year
• doyensec / PESD-Exporter-Extension
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams
  ☆98Updated 9 months ago
• matiassequeira / docker_explorer
  Scan DockerHub images that match a keyword to find secrets.
  ☆54Updated 3 years ago
• sebastian-mora / awsssome_phish
  AWS SSO serverless phishing API.
  ☆29Updated 3 years ago
• nccgroup / ccs
  ☆110Updated last year
• amalmurali47 / onaws
  Fetch the details of assets hosted on AWS.
  ☆86Updated 11 months ago
• WeAreCloudar / s3-account-search
  S3 Account Search
  ☆246Updated last month
• pownjs / git
  Assorted tools for security-related task for git repositories
  ☆59Updated 2 years ago
• Santandersecurityresearch / corsair_scan
  Corsair_scan is a security tool to test Cross-Origin Resource Sharing (CORS).
  ☆122Updated last year
• nccgroup / CollaboratorPlusPlus
  ☆144Updated 2 years ago
• shabarkin / aws-enumerator
  The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testin…
  ☆181Updated 2 years ago
• NotSoSecure / cloud-sec-wiki
  Jekyll Files for cloudsecwiki.com
  ☆49Updated 3 years ago
• lightspin-tech / red-detector
  Scan your EC2 instance to find its vulnerabilities using Vuls (https://vuls.io/en/)
  ☆87Updated 2 years ago
• alexivkin / kubepwn
  Kubernetes Pwnage for all
  ☆54Updated 4 years ago
• AbstractClass / CloudPrivs
  Determine privileges from cloud credentials via brute-force testing.
  ☆64Updated 2 months ago
• The-Login / DNS-Reset-Checker
  Tools to assess the DNS security of web applications
  ☆125Updated 2 years ago
• NetSPI / AWSSigner
  Burp Extension for AWS Signing
  ☆86Updated last month