Alternatives and similar repositories for s3enum:

Users that are interested in s3enum are comparing it to the libraries listed below

• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆515Updated last year
• Static-Flow / gofingerprint
  GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…
  ☆205Updated last year
• gwen001 / s3-buckets-finder
  Find AWS S3 buckets and test their permissions.
  ☆382Updated 2 years ago
• tomdev / teh_s3_bucketeers
  ☆275Updated 3 years ago
• BishopFox / smogcloud
  Find cloud assets that no one wants exposed 🔎 ☁️
  ☆341Updated 4 years ago
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆174Updated 2 years ago
• brianwarehime / inSp3ctor
  AWS S3 Bucket/Object Finder
  ☆119Updated 3 years ago
• lc / secretz
  secretz, minimizing the large attack surface of Travis CI
  ☆326Updated 2 years ago
• root4loot / rescope
  Bugbounty scope tool
  ☆328Updated last month
• NotSoSecure / cloud-service-enum
  ☆246Updated 9 months ago
• ameenmaali / qsfuzz
  qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.
  ☆301Updated 2 years ago
• mxm0z / awesome-sec-s3
  A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets
  ☆358Updated 10 months ago
• Static-Flow / BurpSuite-Team-Extension
  This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …
  ☆258Updated 2 years ago
• allyomalley / LiveTargetsFinder
  Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts a…
  ☆364Updated 2 years ago
• mhmdiaa / second-order
  Second-order subdomain takeover scanner
  ☆387Updated 2 years ago
• jobertabma / transformations
  ☆173Updated 2 years ago
• daeken / httprebind
  Automatic tool for DNS rebinding-based SSRF attacks
  ☆298Updated 4 years ago
• allyomalley / dnsobserver
  A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for…
  ☆190Updated 4 years ago
• antichown / subdomain-takeover
  Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
  ☆361Updated last year
• codingo / crithit
  Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures t…
  ☆211Updated 5 years ago
• Shivangx01b / CorsMe
  Cross Origin Resource Sharing MisConfiguration Scanner
  ☆173Updated 3 years ago
• Abss0x7tbh / bass
  Bass grabs you those "extra resolvers" you are missing out on when performing Active DNS enumeration. Add anywhere from 100-6k resolvers …
  ☆146Updated last year
• serain / bbrecon
  Python library and CLI for the Bug Bounty Recon API
  ☆224Updated 3 years ago
• JoshuaMart / AutoRecon
  Simple shell script for automated domain recognition with some tools
  ☆300Updated 4 years ago
• 0xSearches / sandcastle
  🏰 A Python script for AWS S3 bucket enumeration.
  ☆142Updated 2 years ago
• pentester-io / commonspeak
  Content discovery wordlists generated using BigQuery
  ☆567Updated 4 years ago
• BishopFox / dufflebag
  Search exposed EBS volumes for secrets
  ☆297Updated last year
• teknogeek / ssrf-sheriff
  A simple SSRF-testing sheriff written in Go
  ☆326Updated 5 months ago
• mazen160 / xless
  The Serverless Blind XSS App
  ☆340Updated 2 months ago
• orlyjamie / asnrecon
  ASN reconnaissance script
  ☆126Updated last year