nielsing / yar
Yar is a tool for plunderin' organizations, users and/or repositories.
β237Updated 4 years ago
Alternatives and similar repositories for yar:
Users that are interested in yar are comparing it to the libraries listed below
- Find cloud assets that no one wants exposed π βοΈβ339Updated 4 years ago
- Monitors Github for leaked secretsβ199Updated 5 months ago
- Search exposed EBS volumes for secretsβ297Updated last year
- secretz, minimizing the large attack surface of Travis CIβ326Updated 2 years ago
- A tool for identifying misconfigured CloudFront domainsβ351Updated 4 years ago
- A tool to enumerate S3 buckets manually or via certstreamβ82Updated 2 years ago
- A tool for automatically gathering sensitive information from exposed Jenkins serversβ103Updated 2 years ago
- Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.β247Updated this week
- Uncover forgotten secrets and bring them back to life, haunting security and operations teams.β207Updated last year
- barq: The AWS Cloud Post Exploitation framework!β387Updated 2 years ago
- An open source intelligence tool to crawl the graph of certificate Alternate Namesβ350Updated last year
- Burp with Friendsβ103Updated 2 years ago
- Benchmarking repo for secrets scanningβ231Updated 8 months ago
- ReconJSON is a project dedicated to creating a flexible and consistent JSON format across popular recon tools.β102Updated 6 years ago
- Monitoring GitHub for sensitive data shared publiclyβ66Updated 3 years ago
- A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.β559Updated 2 years ago
- A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.β396Updated 5 years ago
- an asynchronous target enumeration toolβ243Updated 2 years ago
- π° A Python script for AWS S3 bucket enumeration.β141Updated 2 years ago
- Python automation of Docker.sock abuseβ212Updated 2 years ago
- AWS S3 Bucket/Object Finderβ119Updated 3 years ago
- Bento Toolkit is a minimal fedora-based container for penetration tests and CTF with the sweet addition of GUI applications.β77Updated 4 years ago
- Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Applicaβ¦β481Updated 6 years ago
- Pentester-focused Docker registry tool to enumerate and pull imagesβ106Updated 5 years ago
- β125Updated 5 years ago
- A tool to hunt for credentials in github wild AKA git*huntβ294Updated 2 years ago
- a CLI for ephemeral penetration testingβ13Updated 5 years ago
- β275Updated 3 years ago
- A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censysβ152Updated 2 years ago
- A handy DNS service written in Go to aid in the detection of several types of blind vulnerabilities. It monitors a pentester's server forβ¦β190Updated 4 years ago