hoodoer / endgameLinks
An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share the resources with the entire internet 😈
☆12Updated 4 years ago
Alternatives and similar repositories for endgame
Users that are interested in endgame are comparing it to the libraries listed below
Sorting:
- HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enab…☆40Updated 3 years ago
- Enumerate AWS permissions and resources.☆71Updated 3 years ago
- Network penetration testing toolset wrapper☆81Updated 3 years ago
- cvet is a Python utility for pulling actionable vulnerabilities from cvetrends.com☆38Updated 3 years ago
- This is vulnerable microservice written in many language to demonstrating OWASP API Top Security Risk (under development)☆45Updated 3 years ago
- This is a repository for Penetration Test, Purple Team Exercise and Red Team☆17Updated 2 years ago
- CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to …☆126Updated last year
- Simultaneously search CVEs and exploits across multiple cybersecurity data sources.☆13Updated 4 years ago
- Checks whether a domain is hosted on a cloud service such as AWS, Azure or CloudFlare☆59Updated 3 years ago
- User enumeration and password spraying tool for testing Azure AD☆71Updated 3 years ago
- WhereToGo - is a list of popular services that might be used in organizations. By having an account of the user - you can try to find ent…☆128Updated 3 years ago
- Reconmap's web client written in React. Manage all your pentest projects from a single place.☆51Updated last week
- Tools and Scripts used in CRTP☆12Updated 5 years ago
- ☆24Updated 6 years ago
- ☆16Updated 4 years ago
- ☆34Updated 2 years ago
- ☆15Updated 4 years ago
- A multi-cloud DNS record scanner that aims to help cybersecurity/IT analysts identify dangling CNAME records in their cloud DNS services …☆50Updated 2 years ago
- A simple automation tool to detect lfi, rce and ssti vulnerability☆56Updated 3 years ago
- Google Meet Phishing Template For Gophish☆48Updated 3 years ago
- ☆55Updated 3 weeks ago
- "Terrible Thick Client" is a vulnerable application developed in C# .NET framework.☆20Updated 2 years ago
- A fast enumeration tool for publicly exposed Azure Storage blobs.☆116Updated 2 years ago
- Intentionally Vulnerable Nodejs Application & APIs☆21Updated 3 years ago
- My Offensive Security OSWA certification experience and my personal opinion what helps in preparation for the exam☆42Updated 2 years ago
- GATOR - GCP Attack Toolkit for Offensive Research, a tool designed to aid in research and exploiting Google Cloud Environments☆89Updated last year
- Super organized and flexible script for sending phishing campaigns☆56Updated 4 years ago
- ☆90Updated 3 years ago
- ☆94Updated 3 years ago
- A python3 script searching for secret on swaggerhub☆66Updated 3 years ago