TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control systems, cloud storage, and filesystems. It functions as a git secret detector that enumerates hidden commits and a cloud storage security auditor for inspecting container images and storage buckets. The project is distinguished by a credential verification engine that tests discovered secrets against service APIs to confirm they are active, which eliminates false positive alerts. It further analyzes these verified credentials to determine the specific access levels and resources t
Enumerate the permissions associated with AWS credential set
Tools for fingerprinting and exploiting Amazon cloud infrastructures
Awesome cloud enumerator
Las características principales de 0xsha/cloudbrute son: Subdomain Enumeration, Cloud Security, Cloud Storage Auditing, Offensive Security Tools, Reconnaissance Tools, Web Enumeration.
Las alternativas de código abierto para 0xsha/cloudbrute incluyen: dxa4481/trufflehog — TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control… cr0hn/festin — FestIn - Open S3 Bucket Scanner. andresriancho/enumerate-iam — Enumerate the permissions associated with AWS credential set. andresriancho/nimbostratus — Tools for fingerprinting and exploiting Amazon cloud infrastructures. carnal0wnage/weirdaal — WeirdAAL (AWS Attack Library). jordanpotti/awsbucketdump — Security Tool to Look For Interesting Files in S3 Buckets.
