mxm0z / awesome-sec-s3
A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets
☆360Updated 10 months ago
Alternatives and similar repositories for awesome-sec-s3:
Users that are interested in awesome-sec-s3 are comparing it to the libraries listed below
- Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.☆247Updated this week
- Find AWS S3 buckets and test their permissions.☆385Updated 2 years ago
- A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.☆517Updated last year
- BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for c…☆409Updated 3 months ago
- Golang client for querying SecurityTrails API data☆556Updated last year
- S3 Account Search☆4Updated 6 months ago
- Cloudlist is a tool for listing Assets from multiple Cloud Providers.☆923Updated 2 weeks ago
- BurpSuite Extension: A one-stop pen testing checklist and logger tool☆266Updated 2 years ago
- ☆484Updated last year
- CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.☆520Updated 3 years ago
- Enumerate the permissions associated with AWS credential set☆1,149Updated last year
- Awesome cloud enumerator☆1,003Updated last month
- Scrapts Scrapts Scrapts☆237Updated last year
- Vulnerability Scan with Nuclei☆252Updated 5 months ago
- A tool to scrape the AWS ranges looking for a keyword in SSL certificate data.☆231Updated last year
- Find cloud assets that no one wants exposed 🔎 ☁️☆344Updated 4 years ago
- ☆316Updated 3 months ago
- ReconNess is a platform to allow continuous recon (CR) where you can set up a pipeline of #recon tools (Agents) and trigger it base on sc…☆320Updated last month
- A DNS Bruteforcing Wordlist Generator☆357Updated 2 years ago
- A rapid API for the Project Sonar dataset☆649Updated 2 years ago
- Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists☆726Updated 2 years ago
- Go client to communicate with Chaos DB API.☆714Updated this week
- Small tool to Grab subdomains using Shodan api.☆446Updated 6 months ago
- Quickly generate context-specific wordlists for content discovery from lists of URLs or paths☆222Updated 3 years ago
- Curated list of open-source & paid Attack Surface Monitoring (ASM) tools.☆390Updated 6 months ago
- Damn Vulnerable Cloud Application☆193Updated 6 years ago
- Amazon S3 bucket finder and crawler.☆151Updated 3 years ago
- GoFingerprint is a Go tool for taking a list of target web servers and matching their HTTP responses against a user defined list of fing…☆205Updated last year
- mx-takeover focuses DNS MX records and detects misconfigured MX records.☆347Updated last year
- Customisable and automated HTTP header injection☆245Updated 10 months ago