Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.
☆77Mar 4, 2022Updated 4 years ago
Alternatives and similar repositories for s3_objects_check
Users that are interested in s3_objects_check are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Simple python script to check against hypothetical JWT vulnerability.☆51Nov 29, 2020Updated 5 years ago
- take a list of resolved subdomains and output any corresponding CNAMES en masse.☆18Sep 29, 2026Updated last month
- IAMFinder enumerates and finds users and IAM roles in a target AWS account.☆109Nov 19, 2020Updated 5 years ago
- sgCheckup generates nmap output based on scanning your AWS Security Groups for unexpected open ports.☆81Sep 2, 2021Updated 5 years ago
- Salesforce Policy Deviation Checker☆30Sep 30, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A bash script that automates the scanning of a target network for HTTP resources through XXE☆38Dec 2, 2020Updated 5 years ago
- ☆17May 3, 2021Updated 5 years ago
- Search exposed EBS volumes for secrets☆305Apr 24, 2023Updated 3 years ago
- FestIn - Credentialless discovery and monitoring of exposed S3-compatible cloud storage from domains, DNS and web crawling.☆232Updated this week
- rpCheckup is an AWS resource policy security checkup tool that identifies public, external account access, intra-org account access, …☆165Apr 22, 2021Updated 5 years ago
- Unauthenticated enumeration of AWS, Azure, and GCP Principals☆294Jun 10, 2026Updated 4 months ago
- ☆11Jul 28, 2020Updated 6 years ago
- Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities☆48Jan 11, 2023Updated 3 years ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Jan 18, 2022Updated 4 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Python Packet Editing (Decent Compared to AutoRune)☆12Feb 14, 2021Updated 5 years ago
- A multi-threaded scanner that helps identify CORS flaws/misconfigurations☆19Nov 18, 2019Updated 6 years ago
- ☆159Jul 8, 2023Updated 3 years ago
- CVE-2020-25223☆11Sep 13, 2021Updated 5 years ago
- Get notified, with AI-powered context, when someone changes your AWS account through the AWS Console instead of IaC. EventBridge + Bedroc…☆22Updated this week
- Exactly what it sounds like, which is something rad☆22Oct 12, 2022Updated 4 years ago
- ☆24Aug 9, 2022Updated 4 years ago
- ☆20Jul 19, 2021Updated 5 years ago
- Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.☆279Sep 20, 2024Updated 2 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Red Team Scripts for AWS.☆167Jul 28, 2020Updated 6 years ago
- ☆32Aug 14, 2020Updated 6 years ago
- Monitors Github for leaked secrets☆209Oct 25, 2024Updated 2 years ago
- ☆84Dec 5, 2019Updated 6 years ago
- CLI Search for Security Operators of MITRE ATT&CK URLs☆17Jan 5, 2023Updated 3 years ago
- Tool to spray AWS Console IAM Logins☆34Jun 15, 2022Updated 4 years ago
- S3 bucket finder from html,js and bucket misconfiguration testing tool☆34Feb 10, 2020Updated 6 years ago
- A 'find' for S3 public buckets☆11Mar 15, 2017Updated 9 years ago
- Easy discovery of assets☆13Jun 22, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Scripts to quickly fix security and compliance issues☆28Mar 10, 2026Updated 7 months ago
- Automated Attack Simulation in the Cloud, complete with detection use cases.☆620Nov 28, 2024Updated last year
- ☆95Oct 19, 2022Updated 4 years ago
- A simple Toolkit to BF and decrypt Windows EntraId CacheData☆21Jun 20, 2024Updated 2 years ago
- Ugly Duckling is a lightweight scanner built specifically for our Crowdsource community to submit proof-of-concept modules☆186Oct 30, 2021Updated 5 years ago
- A tool for testing subdomain takeover possibilities at a mass scale.☆50May 23, 2021Updated 5 years ago
- The original AWS security enforcer™☆62Mar 6, 2019Updated 7 years ago