trufflesecurity / driftwoodView external linksLinks
Private key usage verification
☆432Apr 4, 2025Updated 10 months ago
Alternatives and similar repositories for driftwood
Users that are interested in driftwood are comparing it to the libraries listed below
Sorting:
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆139Sep 14, 2021Updated 4 years ago
- 🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.☆426Dec 5, 2025Updated 2 months ago
- ☆73Nov 22, 2021Updated 4 years ago
- 🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.☆965Jan 10, 2025Updated last year
- ☆418Oct 16, 2021Updated 4 years ago
- Contextual Content Discovery Tool☆3,085Apr 29, 2024Updated last year
- A Passive SSH back-end and scanner.☆104Jun 18, 2025Updated 7 months ago
- Find, verify, and analyze leaked credentials☆24,487Feb 7, 2026Updated last week
- GraphQL security auditing script with a focus on performing batch GraphQL queries and mutations☆404Dec 24, 2022Updated 3 years ago
- Vandalize old emails. Like an NFT that's easy to prove ownership of.☆35Jul 20, 2023Updated 2 years ago
- Automating situational awareness for cloud penetration tests.☆2,289Feb 5, 2026Updated last week
- Unleash the power of cloud☆821Nov 19, 2024Updated last year
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆946Dec 31, 2021Updated 4 years ago
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆775Aug 19, 2024Updated last year
- Dump all available paths and/or endpoints on WADL file.☆98Nov 24, 2025Updated 2 months ago
- truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)☆122Aug 20, 2023Updated 2 years ago
- Easily turn single threaded command line applications into a fast, multi-threaded application with CIDR and glob support.☆1,284Sep 12, 2025Updated 5 months ago
- Takes a single wordlist item and tests it one by one over a large collection of websites before moving onto the next. Create signatures t…☆213Mar 31, 2020Updated 5 years ago
- ☆709Nov 27, 2024Updated last year
- Rust-based high performance domain permutation generator.☆297Dec 2, 2023Updated 2 years ago
- Fetch web pages using headless Chrome, storing all fetched resources including JavaScript files. Run arbitrary JavaScript on many web pag…☆530Apr 23, 2025Updated 9 months ago
- Generate a dynamic PAC script that will route traffic to your Burp proxy only if it matches the scope defined in your Burp target.☆34Nov 8, 2021Updated 4 years ago
- Convolutional neural network for analyzing pentest screenshots☆1,278Feb 19, 2024Updated last year
- Filter and enrich a list of subdomains by level☆210Sep 25, 2023Updated 2 years ago
- Find cloud assets that no one wants exposed 🔎 ☁️☆349Jul 20, 2020Updated 5 years ago
- Tools to assess the DNS security of web applications☆127Oct 5, 2022Updated 3 years ago
- Keyhacks is a repository which shows quick ways in which API keys leaked by a bug bounty program can be checked to see if they're valid.☆6,042Aug 14, 2024Updated last year
- Research on the enumeration of IAM permissions without logging to CloudTrail☆61Jun 11, 2021Updated 4 years ago
- A GraphQL enumeration and extraction tool☆134Jan 29, 2023Updated 3 years ago
- Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.☆277Sep 20, 2024Updated last year
- ☆95Sep 18, 2021Updated 4 years ago
- A high performance TCP SYN port scanner.☆318Mar 2, 2024Updated last year
- A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for att…☆5,740Feb 5, 2026Updated last week
- Leverages publicly available datasets from Google BigQuery to generate content discovery and subdomain wordlists☆765Feb 12, 2023Updated 3 years ago
- 🦄🔒 Awesome list of secrets in environment variables 🖥️☆901Sep 21, 2022Updated 3 years ago
- Amazingly fast response crawler to find juicy stuff in the source code! 😎🔥☆156Sep 18, 2023Updated 2 years ago
- Go scripts for checking API key / access token validity☆220Aug 3, 2021Updated 4 years ago
- WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted se…☆156Mar 31, 2024Updated last year
- Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable …☆749Dec 19, 2023Updated 2 years ago