Alternatives and similar repositories for s3-leaks

Users that are interested in s3-leaks are comparing it to the libraries listed below

• RhinoSecurityLabs / Cloud-Security-Research
  Cloud-related research releases from the Rhino Security Labs team.
  ☆389Updated 5 years ago
• carnal0wnage / weirdAAL
  WeirdAAL (AWS Attack Library)
  ☆816Updated 6 months ago
• opendevsecops / guide-aws-hacking
  This is an offensive guide to securing AWS infrastructures. The hope is that by knowing how to take advantage of various types of AWS wea…
  ☆172Updated 6 years ago
• RhinoSecurityLabs / Security-Research
  Exploits written by the Rhino Security Labs team
  ☆1,084Updated 4 years ago
• RhinoSecurityLabs / ccat
  Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
  ☆633Updated 5 years ago
• RhinoSecurityLabs / GCPBucketBrute
  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  ☆527Updated 2 years ago
• MindPointGroup / cloudfrunt
  A tool for identifying misconfigured CloudFront domains
  ☆361Updated 5 years ago
• koenrh / s3enum
  Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.
  ☆251Updated last week
• BishopFox / dufflebag
  Search exposed EBS volumes for secrets
  ☆297Updated 2 years ago
• OWASP / DVSA
  a Damn Vulnerable Serverless Application
  ☆541Updated last year
• nccgroup / sadcloud
  A tool for standing up (and tearing down!) purposefully insecure cloud infrastructure
  ☆715Updated last year
• mxm0z / awesome-sec-s3
  A collection of awesome AWS S3 tools that collects and enumerates exposed S3 buckets
  ☆376Updated last year
• OWASP / Serverless-Goat
  OWASP ServerlessGoat: a serverless application demonstrating common serverless security flaws
  ☆326Updated 11 months ago
• Voulnet / barq
  barq: The AWS Cloud Post Exploitation framework!
  ☆387Updated 2 years ago
• andresriancho / enumerate-iam
  Enumerate the permissions associated with AWS credential set
  ☆1,179Updated last year
• dxa4481 / truffleHogRegexes
  These are the regexes that power truffleHog
  ☆217Updated 2 years ago
• WeAreCloudar / s3-account-search
  S3 Account Search
  ☆10Updated 9 months ago
• RhinoSecurityLabs / AWS-IAM-Privilege-Escalation
  A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.
  ☆918Updated 6 years ago
• emtunc / SlackPirate
  Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace
  ☆773Updated 5 months ago
• andresriancho / nimbostratus
  Tools for fingerprinting and exploiting Amazon cloud infrastructures
  ☆475Updated 2 years ago
• pumasecurity / serverless-prey
  Serverless Functions for establishing Reverse Shells to Lambda, Azure Functions, and Google Cloud Functions
  ☆249Updated last week
• DavidDikker / endgame
  An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share th…
  ☆203Updated 4 years ago
• BishopFox / iam-vulnerable
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
  ☆507Updated last year
• NotSoSecure / cloud-service-enum
  ☆252Updated last year
• appsecco / attacking-cloudgoat2
  A step-by-step walkthrough of CloudGoat 2.0 scenarios.
  ☆134Updated 5 years ago
• mykter / aws-security-cert-service-notes
  Security aspects of AWS products for the Security Specialist certification
  ☆211Updated 3 years ago
• m6a-UdS / dvca
  Damn Vulnerable Cloud Application
  ☆196Updated 6 years ago
• BishopFox / smogcloud
  Find cloud assets that no one wants exposed 🔎 ☁️
  ☆348Updated 5 years ago
• josehelps / git-wild-hunt
  A tool to hunt for credentials in github wild AKA git*hunt
  ☆295Updated 2 years ago
• assetnote / ghostbuster
  Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.
  ☆275Updated 10 months ago