hoodoer / endgameLinks
An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet π
β12Updated 4 years ago
Alternatives and similar repositories for endgame
Users that are interested in endgame are comparing it to the libraries listed below
Sorting:
- Network penetration testing toolset wrapperβ81Updated 3 years ago
- HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enabβ¦β40Updated 3 years ago
- cvet is a Python utility for pulling actionable vulnerabilities from cvetrends.comβ39Updated 3 years ago
- User enumeration and password spraying tool for testing Azure ADβ70Updated 3 years ago
- Enumerate AWS permissions and resources.β71Updated 3 years ago
- β24Updated 6 years ago
- This is a repository for Penetration Test, Purple Team Exercise and Red Teamβ17Updated 2 years ago
- β90Updated 3 years ago
- Checks whether a domain is hosted on a cloud service such as AWS, Azure or CloudFlareβ59Updated 2 years ago
- β94Updated 3 years ago
- WhereToGo - is a list of popular services that might be used in organizations. By having an account of the user - you can try to find entβ¦β128Updated 3 years ago
- CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to β¦β125Updated last year
- MayorSec DNS Enumeration Toolβ89Updated last year
- Next generation fireprox AWS API endpoint creation utility.β56Updated 3 years ago
- Information Security Information From Webβ28Updated 4 months ago
- A Python implementation of dafthack's MSOLSpray. A password spraying tool for Microsoft Online accounts (Azure/O365). The script logs if β¦β97Updated last year
- β54Updated 2 years ago
- A multi-cloud DNS record scanner that aims to help cybersecurity/IT analysts identify dangling CNAME records in their cloud DNS services β¦β50Updated 2 years ago
- β16Updated 4 years ago
- β27Updated 2 years ago
- β42Updated 3 years ago
- Simple chrome extension for full name extraction and conversion to emails/usernames. Utilizes the 'people' tab of the target company on Lβ¦β28Updated 7 months ago
- This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)β45Updated 2 years ago
- β67Updated 2 years ago
- Simultaneously search CVEs and exploits across multiple cybersecurity data sources.β13Updated 3 years ago
- "Terrible Thick Client" is a vulnerable application developed in C# .NET framework.β20Updated 2 years ago
- β34Updated 2 years ago
- a map for the azure oriented pentestsβ68Updated 2 years ago
- A python3 script searching for secret on swaggerhubβ66Updated 3 years ago
- Intentionally Vulnerable Nodejs Application & APIsβ21Updated 3 years ago