mxm0z / awesome-sec-s3Links
A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets
☆376Updated last year
Alternatives and similar repositories for awesome-sec-s3
Users that are interested in awesome-sec-s3 are comparing it to the libraries listed below
Sorting:
- Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.☆251Updated 2 months ago
- Awesome cloud enumerator☆1,020Updated 4 months ago
- GraphQL automated security testing toolkit☆320Updated last year
- Amazon S3 bucket finder and crawler.☆153Updated 3 years ago
- A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.☆526Updated 2 years ago
- BurpSuite Extension: A one-stop pen testing checklist and logger tool☆266Updated 2 years ago
- Golang client for querying SecurityTrails API data☆562Updated last year
- Find AWS S3 buckets and test their permissions.☆390Updated 2 years ago
- Scrapts Scrapts Scrapts☆238Updated last year
- A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.☆233Updated last year
- BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for c…☆424Updated 5 months ago
- A DNS Bruteforcing Wordlist Generator☆359Updated 2 years ago
- Damn Vulnerable Cloud Application☆195Updated 6 years ago
- Vulnerability Scan with Nuclei☆257Updated 7 months ago
- S3 Account Search☆10Updated 8 months ago
- This repository contains various media files for known attacks on web applications processing media files. Useful for penetration tests a…☆337Updated 4 years ago
- Cloudlist is a tool for listing Assets from multiple Cloud Providers.☆947Updated this week
- ☆492Updated last year
- Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.☆419Updated 9 months ago
- ReconNess is a platform to allow continuous recon (CR) where you can set up a pipeline of #recon tools (Agents) and trigger it base on sc…☆321Updated 3 months ago
- Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.☆274Updated 9 months ago
- ☆391Updated 3 years ago
- The Bug Bounty Reconnaissance Framework (BBRF) can help you coordinate your reconnaissance workflows across multiple devices☆314Updated this week
- A collection of regexes for every possbile use☆428Updated last year
- Turns any junk text into a usable wordlist for brute-forcing.☆222Updated last year
- Small tool to Grab subdomains using Shodan api.☆476Updated last week
- ☆251Updated last year
- Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists☆737Updated 2 years ago
- mx-takeover focuses DNS MX records and detects misconfigured MX records.☆348Updated last year
- Fast and customizable vulnerability scanner For JIRA written in Python☆321Updated 6 months ago