How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Finds Directory Listings or open S3 buckets from a list of URLs
The main features of cybercdh/dirlstr are: Cloud Storage Auditing.
Open-source alternatives to cybercdh/dirlstr include: six2dez/reconftw — reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the… dxa4481/trufflehog — TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control… abuvanth/kicks3 — S3 bucket finder from html,js and bucket misconfiguration testing tool. ankane/s3tk — A security toolkit for Amazon S3. codewatchorg/burp-anonymouscloud — Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible… alecblance/s3bucketlist — Chrome and Firefox extension that lists Amazon S3 Buckets while browsing.
reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio
TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control systems, cloud storage, and filesystems. It functions as a git secret detector that enumerates hidden commits and a cloud storage security auditor for inspecting container images and storage buckets. The project is distinguished by a credential verification engine that tests discovered secrets against service APIs to confirm they are active, which eliminates false positive alerts. It further analyzes these verified credentials to determine the specific access levels and resources t
S3 bucket finder from html,js and bucket misconfiguration testing tool
Chrome and Firefox extension that lists Amazon S3 Buckets while browsing