Alternatives and similar repositories for cloud_enum

Users that are interested in cloud_enum are comparing it to the libraries listed below

• 0xsha / CloudBrute
  Awesome cloud enumerator
  ☆1,020Updated 4 months ago
• blacklanternsecurity / TREVORspray
  TREVORspray is a modular password sprayer with threading, clever proxying, loot modules, and more!
  ☆1,204Updated last month
• BishopFox / eyeballer
  Convolutional neural network for analyzing pentest screenshots
  ☆1,226Updated last year
• dafthack / CloudPentestCheatsheets
  This repository contains a collection of cheatsheets I have put together for tools related to pentesting organizations that leverage clou…
  ☆2,720Updated 9 months ago
• carlospolop / PurplePanda
  Identify privilege escalation paths within and across different clouds
  ☆699Updated 3 weeks ago
• codingo / Interlace
  Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.
  ☆1,255Updated 2 months ago
• yeswehack / PwnFox
  PwnFox is a Firefox/Burp extension that provide usefull tools for your security audit.
  ☆1,177Updated 11 months ago
• blacklanternsecurity / writehat
  A pentest reporting tool written in Python. Free yourself from Microsoft Word.
  ☆1,407Updated 3 months ago
• chvancooten / BugBountyScanner
  A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.
  ☆909Updated 2 months ago
• devanshbatham / FavFreak
  Making Favicon.ico based Recon Great again !
  ☆1,215Updated last year
• j3ssie / metabigor
  OSINT tools and more but without API key
  ☆1,356Updated 2 weeks ago
• knavesec / CredMaster
  Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling
  ☆1,153Updated 3 months ago
• six2dez / pentest-book
  ☆1,744Updated last month
• Dheerajmadhukar / karma_v2
  ⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)
  ☆864Updated last month
• ayoubfathi / leaky-paths
  A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…
  ☆981Updated last year
• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆526Updated 2 years ago
• PentestPad / subzy
  Subdomain takeover vulnerability checker
  ☆1,275Updated 10 months ago
• tillson / git-hound
  GitHub recon tool leveraging Code Search API. Scans for exposed API keys across all of GitHub, not just known repos and orgs. Support for…
  ☆1,318Updated 3 weeks ago
• haccer / subjack
  Subdomain Takeover tool written in Go
  ☆1,984Updated last year
• glitchedgitz / cook
  A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.
  ☆1,227Updated 2 months ago
• hakluke / haktrails
  Golang client for querying SecurityTrails API data
  ☆562Updated last year
• laluka / bypass-url-parser
  bypass-url-parser
  ☆1,078Updated last week
• assetnote / commonspeak2
  Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists
  ☆737Updated 2 years ago
• ksharinarayanan / SSRFire
  An automated SSRF finder. Just give the domain name and your server and chill! ;) Also has options to find XSS and open redirects
  ☆964Updated 3 years ago
• securing / DumpsterDiver
  Tool to search secrets in various filetypes.
  ☆1,018Updated 2 years ago
• gquere / pwn_jenkins
  Notes about attacking Jenkins servers
  ☆2,065Updated last year
• sa7mon / S3Scanner
  Scan for misconfigured S3 buckets across S3-compatible APIs!
  ☆2,830Updated last month
• andresriancho / enumerate-iam
  Enumerate the permissions associated with AWS credential set
  ☆1,173Updated last year
• HackTricks-wiki / hacktricks-cloud
  ☆675Updated this week
• chrislockard / api_wordlist
  A wordlist of API names for web application assessments
  ☆832Updated 3 weeks ago