nielsing / yar
Yar is a tool for plunderin' organizations, users and/or repositories.
☆231Updated 3 years ago
Related projects: ⓘ
- Find cloud assets that no one wants exposed 🔎 ☁️☆330Updated 4 years ago
- Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.☆215Updated 3 months ago
- A tool for automatically gathering sensitive information from exposed Jenkins servers☆103Updated last year
- Monitors Github for leaked secrets☆188Updated last month
- An open source intelligence tool to crawl the graph of certificate Alternate Names☆341Updated 7 months ago
- secretz, minimizing the large attack surface of Travis CI☆321Updated 2 years ago
- Search exposed EBS volumes for secrets☆278Updated last year
- A tool for identifying misconfigured CloudFront domains☆342Updated 4 years ago
- ☆298Updated this week
- Benchmarking repo for secrets scanning☆229Updated last month
- These are the regexes that power truffleHog☆209Updated last year
- A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.☆552Updated last year
- Declarative penetration testing orchestration framework☆288Updated 4 years ago
- A simple HTTP(S) and DNS Canary bot with Slack/Discord/MS Teams/Lark/Telegram & Pushover support☆288Updated last month
- Finding exposed secrets and personal data in GitLab☆195Updated last year
- an asynchronous target enumeration tool☆239Updated last year
- barq: The AWS Cloud Post Exploitation framework!☆385Updated last year
- A tool to enumerate S3 buckets manually or via certstream☆80Updated last year
- FestIn - Open S3 Bucket Scanner☆227Updated 3 years ago
- Burp with Friends☆99Updated last year
- rapid content discovery tool for recursively querying webservers, handy in pentesting and web application assessments☆242Updated 4 years ago
- Burp-Automator: A Burp Suite Automation Tool with Slack Integration. It can be used with Jenkins and Selenium to automate Dynamic Applica…☆480Updated 6 years ago
- DNS Rebinding Exploitation Framework☆479Updated 3 years ago
- Python automation of Docker.sock abuse☆210Updated last year
- A collection of useful Serverless functions I use when pentesting☆379Updated last year
- A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.☆393Updated 4 years ago
- 🏰 A Python script for AWS S3 bucket enumeration.☆137Updated last year
- Slack Enumeration and Extraction Tool - extract sensitive information from a Slack Workspace☆725Updated 3 years ago
- Scans Slack for API tokens, credentials, passwords, and more using YARA rules☆37Updated 3 years ago