random-robbie / mass-s3-bucket-testerView external linksLinks
This tests a list of s3 buckets to see if they have dir listings enabled or if they are uploadable
☆55Dec 10, 2025Updated 2 months ago
Alternatives and similar repositories for mass-s3-bucket-tester
Users that are interested in mass-s3-bucket-tester are comparing it to the libraries listed below
Sorting:
- ☆16May 3, 2021Updated 4 years ago
- Scans a list of websites for Cloudfront or S3 Buckets☆110Oct 28, 2025Updated 3 months ago
- take a list of resolved subdomains and output any corresponding CNAMES en masse.☆18Jan 29, 2026Updated 2 weeks ago
- Web for Pentester I☆10Sep 21, 2018Updated 7 years ago
- ☆536Feb 3, 2026Updated 2 weeks ago
- Study of a hypothetical attack scenario where an attacker corrupts images that are fed into an AI system, and has only a few chances befo…☆14Aug 31, 2021Updated 4 years ago
- CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.☆11Oct 29, 2018Updated 7 years ago
- HoneyDB Python Module☆14Feb 6, 2024Updated 2 years ago
- Finds Directory Listings or open S3 buckets from a list of URLs☆52Dec 1, 2021Updated 4 years ago
- Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities☆48Jan 11, 2023Updated 3 years ago
- Small script to check a list of domains against open redirect vulnerability☆28Jan 22, 2022Updated 4 years ago
- python tools to assist in penetration testing☆14Jan 19, 2026Updated 3 weeks ago
- patched information leak leaking full names associated with some email addresses including but not limited to gmail☆37Mar 13, 2021Updated 4 years ago
- A simple python script which can check HTTP status of branch of URLs/Subdomains and grab URLs/Subdomain title☆12Oct 16, 2019Updated 6 years ago
- All-in-One WP Migration-Backup-Finder☆15Nov 5, 2025Updated 3 months ago
- A tool to bruteforce nameservers when working with subdomain delegations to AWS.☆58Aug 22, 2019Updated 6 years ago
- Exchange your privileges for Domain Admin privs by abusing Exchange☆17Mar 5, 2020Updated 5 years ago
- #BugBounty #BugBounty Tools #WebDeveloper Tool☆38May 17, 2025Updated 9 months ago
- Kubernetes Scanner☆40Feb 14, 2022Updated 4 years ago
- ZIP File Raider - Burp Extension for ZIP File Payload Testing☆72Aug 31, 2020Updated 5 years ago
- Hun2race is an automated report generation tool designed for bug hunters and penetration testers.☆14Sep 17, 2024Updated last year
- Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.☆78Mar 4, 2022Updated 3 years ago
- Bug Bounty Dork☆72Feb 14, 2022Updated 4 years ago
- Automated blind-xss search for Burp Suite☆285Oct 10, 2019Updated 6 years ago
- A Threat hunter's playbook to aid the development of techniques and hypothesis for hunting campaigns.☆14Jul 18, 2018Updated 7 years ago
- A tool for testing subdomain takeover possibilities at a mass scale.☆50May 23, 2021Updated 4 years ago
- The format of various s3 buckets is convert in one format. for bugbounty and security testing.☆86May 6, 2023Updated 2 years ago
- Simple python script to check against hypothetical JWT vulnerability.☆51Nov 29, 2020Updated 5 years ago
- Detect, manage and exploit Blind Cross-site scripting (XSS) vulnerabilities.☆39Jan 20, 2023Updated 3 years ago
- Broken Link Hijacking Burp Extension☆57Sep 13, 2019Updated 6 years ago
- ☆24Jun 29, 2020Updated 5 years ago
- Simple XXE test suite generated specifically for SAML interfaces☆22May 18, 2018Updated 7 years ago
- Python utility to takeover domains vulnerable to AWS NS Takeover☆86Feb 2, 2023Updated 3 years ago
- Simple burp extension for routing traffic over tor. It instruments tor to switch to a new circuit after every N requests.☆20Jun 20, 2022Updated 3 years ago
- A tool used to check if a CNAME resolves to the scope address. If the CNAME resolves to a non-scope address it might be worth checking ou…☆134Aug 14, 2023Updated 2 years ago
- ☆92Dec 8, 2022Updated 3 years ago
- A tool to find sensitive keys and passwords in Travis logs☆140Jun 27, 2021Updated 4 years ago
- A tool that turns the authoritative nameservers of DNS providers to resolvers and resolves the target domain list. Please think of this a…☆25Sep 19, 2019Updated 6 years ago
- Multi source CVE/exploit parser.☆27Aug 30, 2017Updated 8 years ago