Alternatives and similar repositories for action-octoscan

Users that are interested in action-octoscan are comparing it to the libraries listed below

• synacktiv / DepFuzzer
  ☆94Updated last month
• AdnaneKhan / Cacheract
  GitHub Actions Cache Native Malware - for Educational and Research Purposes only.
  ☆88Updated 2 weeks ago
• LowOrbitSecurity / gubble
  gubble is a tool designed to audit Google Workspace group settings. It analyzes settings such as who can join, view membership, post mess…
  ☆81Updated 8 months ago
• praetorian-inc / noseyparker-explorer
  Interactive results explorer and annotation tool for Nosey Parker
  ☆52Updated 7 months ago
• n0tspam / delepwn
  DelePwn is a security assessment tool designed to identify and demonstrate the risks associated with Google Workspace Domain-Wide Delegat…
  ☆37Updated 6 months ago
• SpecterOps / GitHound
  ☆92Updated this week
• synacktiv / captaincredz
  CaptainCredz is a modular and discreet password-spraying tool.
  ☆133Updated 6 months ago
• secorizon / OffByWon
  Network Fuzzing Framework
  ☆63Updated 3 weeks ago
• jtesta / k8s_spoofilizer
  Creates Kubernetes Golden Tickets through ServiceAccount token forging and user certificate forging.
  ☆51Updated 11 months ago
• mosesrenegade / PMapper
  A tool for quickly evaluating IAM permissions in AWS.
  ☆60Updated 2 years ago
• p0dalirius / GeoWordlists
  GeoWordlists is a tool to generate wordlists of passwords containing cities at a defined distance around the client city.
  ☆157Updated last year
• synacktiv / gh-hijack-runner
  A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.
  ☆27Updated last year
• peass-ng / Blue-CloudPEASS
  ☆136Updated last month
• pun-private / barbhack2024-web
  ☆14Updated last year
• SpecterOps / JamfHound
  JamfHound is a python3 project designed to collect and identify attack paths in Jamf Pro tenants based on existing object permissions by …
  ☆117Updated 5 months ago
• bilals12 / clusterfuck
  ☆42Updated 2 months ago
• adelapazborrero / slack_jack
  Hijack a slack bot to phish your way in
  ☆57Updated 6 months ago
• Syslifters / reptor
  ☆23Updated 4 months ago
• carlospolop / Bruteforce-GCP-Permissions
  Use the GCP testIamPermissions functionality to bruteforce and discover your permissions
  ☆45Updated 7 months ago
• hac01 / gcp-iam-brute
  ☆51Updated last year
• p0dalirius / ldap2json
  The ldap2json script allows you to extract the whole LDAP content of a Windows domain into a JSON file.
  ☆142Updated last year
• MrTurvey / Burp2API
  Converting your Burp Suite projects into JSON APIs which can be viewed with Swagger editor or imported into Postman.
  ☆75Updated last year
• sp0ckus / DefCon33
  ☆16Updated 5 months ago
• MatheuZSecurity / NullSection
  NullSection is an Anti-Reversing tool that applies a technique that overwrites the section header with nullbytes.
  ☆67Updated 2 years ago
• RootUp / SmuggleShield
  Protection against HTML smuggling attacks.
  ☆101Updated 7 months ago
• Verizon / verizon_burp_extensions_ai
  Verizon Burp Extensions: AI Suite
  ☆142Updated 9 months ago
• siamthanathack / Passkey-Raider
  Burp Suite extension for testing Passkey systems.
  ☆75Updated 10 months ago
• 0ca / BoxPwnr
  A modular framework for benchmarking LLMs and agentic strategies on security challenges across HackTheBox, TryHackMe, PortSwigger Labs, C…
  ☆197Updated this week
• andrei8055 / SOAPI
  SOAPI - The OpenAPI Documentation Scanner
  ☆39Updated 11 months ago
• Slayer0x / Cloud-Detective
  Cloud subdomains identification tool
  ☆62Updated 9 months ago