Alternatives and similar repositories for s3enum:

Users that are interested in s3enum are comparing it to the libraries listed below

• Static-Flow / gofingerprint
  GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…
  ☆205Updated last year
• tomdev / teh_s3_bucketeers
  ☆274Updated 3 years ago
• BishopFox / smogcloud
  Find cloud assets that no one wants exposed 🔎 ☁️
  ☆339Updated 4 years ago
• lc / secretz
  secretz, minimizing the large attack surface of Travis CI
  ☆326Updated 2 years ago
• gwen001 / s3-buckets-finder
  Find AWS S3 buckets and test their permissions.
  ☆379Updated 2 years ago
• teknogeek / ssrf-sheriff
  A simple SSRF-testing sheriff written in Go
  ☆324Updated 5 months ago
• brianwarehime / inSp3ctor
  AWS S3 Bucket/Object Finder
  ☆119Updated 3 years ago
• mxm0z / awesome-sec-s3
  A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets
  ☆354Updated 9 months ago
• NotSoSecure / cloud-service-enum
  ☆246Updated 9 months ago
• MindPointGroup / cloudfrunt
  A tool for identifying misconfigured CloudFront domains
  ☆351Updated 4 years ago
• Static-Flow / BurpSuite-Team-Extension
  This Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes …
  ☆256Updated 2 years ago
• allyomalley / LiveTargetsFinder
  Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts a…
  ☆364Updated 2 years ago
• 0xSearches / sandcastle
  🏰 A Python script for AWS S3 bucket enumeration.
  ☆141Updated 2 years ago
• daeken / httprebind
  Automatic tool for DNS rebinding-based SSRF attacks
  ☆298Updated 4 years ago
• N0MoreSecr3ts / wraith
  Uncover forgotten secrets and bring them back to life, haunting security and operations teams.
  ☆207Updated last year
• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆510Updated last year
• daeken / SSRFTest
  SSRF testing tool
  ☆244Updated 2 years ago
• ameenmaali / qsfuzz
  qsfuzz (Query String Fuzz) allows you to build your own rules to fuzz query strings and easily identify vulnerabilities.
  ☆300Updated 2 years ago
• codingo / crithit
  Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures t…
  ☆209Updated 5 years ago
• rastating / dnmasscan
  A script that can resolve an input file of domains and scan them with masscan
  ☆157Updated 4 years ago
• RhinoSecurityLabs / Swagger-EZ
  A tool geared towards pentesting APIs using OpenAPI definitions.
  ☆174Updated 2 years ago
• allyomalley / dnsobserver
  A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server for…
  ☆190Updated 4 years ago
• prodigysml / Dr.-Watson
  Dr. Watson is a simple Burp Suite extension that helps find assets, keys, subdomains, IP addresses, and other useful information! It's yo…
  ☆215Updated 5 years ago
• proabiral / inception
  A highly configurable Framework for easy automated web scanning
  ☆371Updated 4 years ago
• mhmdiaa / second-order
  Second-order subdomain takeover scanner
  ☆386Updated 2 years ago
• JoshuaMart / AutoRecon
  Simple shell script for automated domain recognition with some tools
  ☆299Updated 4 years ago
• dxa4481 / truffleHogRegexes
  These are the regexes that power truffleHog
  ☆217Updated 2 years ago
• epi052 / recon-pipeline
  An automated target reconnaissance pipeline.
  ☆429Updated 2 years ago
• root4loot / rescope
  Bugbounty scope tool
  ☆327Updated 3 weeks ago
• putsi / privatecollaborator
  A script for installing private Burp Collaborator with free Let's Encrypt SSL-certificate
  ☆208Updated 9 months ago