securisec / cliamLinks
Cloud agnostic IAM permissions enumerator
☆157Updated 5 months ago
Alternatives and similar repositories for cliam
Users that are interested in cliam are comparing it to the libraries listed below
Sorting:
- A utility to convert your AWS CLI credentials into AWS console access.☆243Updated 5 years ago
- The AWS Enumerator was created for service enumeration and info dumping for investigations of penetration testers during Black-Box testin…☆226Updated 3 years ago
- Tools to assess DNS security.☆152Updated last year
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆191Updated 9 months ago
- Nuclear Pond is a utility leveraging Nuclei to perform internet wide scans for the cost of a cup of coffee.☆184Updated last year
- S3 Account Search☆18Updated last month
- ☆127Updated last year
- FlowMate, a BurpSuite extension that brings taint analysis to web applications, by tracking all parameters send to a target application a…☆163Updated last week
- A GraphQL enumeration and extraction tool☆133Updated 2 years ago
- truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)☆119Updated 2 years ago
- EC2StepShell is an AWS post-exploitation tool for getting high privileges reverse shells in public or private EC2 instances.☆67Updated 11 months ago
- Kubernetes exploitation tool☆363Updated last year
- CoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to …☆125Updated last year
- ☆112Updated 2 years ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆105Updated 7 months ago
- ☆104Updated 2 years ago
- A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation☆108Updated last year
- Determine privileges from cloud credentials via brute-force testing.☆69Updated last year
- Enumerate AWS permissions and resources.☆70Updated 3 years ago
- ☆90Updated last month
- WAF bypass PoC☆48Updated last year
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆30Updated 2 years ago
- Find authentication (authn) and authorization (authz) security bugs in web application routes.☆274Updated 2 weeks ago
- A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…☆109Updated 10 months ago
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆42Updated last year
- openrisk is a tool that generates a risk score based on the results of a Nuclei scan.☆172Updated last week
- Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…☆260Updated 3 months ago
- Find CVE PoCs on GitHub☆152Updated last month
- A fast enumeration tool for publicly exposed Azure Storage blobs.☆106Updated 2 years ago
- ☆140Updated last week