Alternatives and similar repositories for s3enum

Users that are interested in s3enum are comparing it to the libraries listed below

• Static-Flow / gofingerprint
  GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…
  ☆203Updated last year
• tomdev / teh_s3_bucketeers
  ☆276Updated 3 years ago
• BishopFox / smogcloud
  Find cloud assets that no one wants exposed 🔎 ☁️
  ☆344Updated 4 years ago
• gwen001 / s3-buckets-finder
  Find AWS S3 buckets and test their permissions.
  ☆386Updated 2 years ago
• daeken / httprebind
  Automatic tool for DNS rebinding-based SSRF attacks
  ☆300Updated 4 years ago
• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆517Updated last year
• brianwarehime / inSp3ctor
  AWS S3 Bucket/Object Finder
  ☆119Updated 3 years ago
• lc / secretz
  secretz, minimizing the large attack surface of Travis CI
  ☆325Updated 2 years ago
• allyomalley / dnsobserver
  A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for…
  ☆191Updated 4 years ago
• root4loot / rescope
  Bugbounty scope tool
  ☆328Updated 2 months ago
• daeken / SSRFTest
  SSRF testing tool
  ☆245Updated 2 years ago
• ameenmaali / qsfuzz
  qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.
  ☆301Updated 2 years ago
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆175Updated 2 years ago
• codingo / crithit
  Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures t…
  ☆211Updated 5 years ago
• JoshuaMart / AutoRecon
  Simple shell script for automated domain recognition with some tools
  ☆300Updated 4 years ago
• secdec / attack-surface-detector-cli
  ☆80Updated 3 years ago
• teknogeek / ssrf-sheriff
  A simple SSRF-testing sheriff written in Go
  ☆326Updated 6 months ago
• antichown / subdomain-takeover
  Subdomain Takeover Scanner | Subdomain Takeover Tool | by 0x94
  ☆361Updated last year
• NotSoSecure / cloud-service-enum
  ☆248Updated 10 months ago
• cablej / FileChangeMonitor
  Continuous monitoring for JavaScript files
  ☆220Updated 5 years ago
• allyomalley / LiveTargetsFinder
  Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts a…
  ☆365Updated 2 years ago
• mhmdiaa / second-order
  Second-order subdomain takeover scanner
  ☆389Updated 2 years ago
• Abss0x7tbh / bass
  Bass grabs you those "extra resolvers" you are missing out on when performing Active DNS enumeration. Add anywhere from 100-6k resolvers …
  ☆146Updated last year
• 0xSearches / sandcastle
  🏰 A Python script for AWS S3 bucket enumeration.
  ☆143Updated 2 years ago
• rastating / dnmasscan
  A script that can resolve an input file of domains and scan them with masscan
  ☆156Updated 4 years ago
• mazen160 / xless
  The Serverless Blind XSS App
  ☆340Updated this week
• Static-Flow / BurpSuite-Team-Extension
  This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …
  ☆259Updated 2 years ago
• JuxhinDB / OOB-Server
  A Bind9 server for pentesters to use for Out-of-Band vulnerabilities
  ☆190Updated 5 years ago
• mandatoryprogrammer / xsshunter_client
  Correlated injection proxy tool for XSS Hunter
  ☆255Updated 2 years ago
• LewisArdern / bXSS
  bXSS is a utility which can be used by bug hunters and organizations to identify Blind Cross-Site Scripting.
  ☆535Updated 2 years ago