Open-source alternatives to CloudTools

Create your own vulnerable by design AWS penetration testing playground

CDK is a specialized toolset for container security auditing, container escape exploitation, and cloud infrastructure pentesting. It provides a collection of scripts and tools designed to identify and exploit vulnerabilities in container runtimes to break out of isolated environments and execute commands on the underlying host operating system. The project features a dedicated Docker runtime exploit suite for abusing the Docker API, procfs, and cgroups to gain unauthorized host-level access. It includes specific techniques for bypassing isolation via LXCFS, user namespace exploitation, and ho

A Powerful Subdomain Takeover Tool

自动化爬取并自动测试所有swagger接口

Automation for javascript recon in bug bounty.

Rip web accessible (distributed) version control systems: SVN/GIT/HG...

A Swagger API Exploit

SecretFinder - A python script for find sensitive data (apikeys, accesstoken,jwt,..) and search anything on javascript files

阿里云accesskey利用工具

API接口管理工具(目前内置微信公众号、微信小程序、企业微信、飞书、钉钉等)

A Python program to scrape secrets from GitHub through usage of a large repository of dorks.

This Repo serves as a collection of shared security and penetration testing resources for the cloud.

Packer Fuzzer is a fast and efficient scanner for security detection of websites constructed by javascript module bundler such as Webpack.

S3Scanner is a security tool for auditing public access and misconfigured permissions across S3-compatible storage providers. It functions as a storage auditor and security scanner designed to identify open buckets, enumerate publicly accessible objects, and exfiltrate data from misconfigured cloud environments. The project is distinguished by its integration with message brokers, allowing it to consume target lists for large-scale cloud infrastructure audits. It also provides utilities for dumping the entire contents of misconfigured buckets to local directories and calculating the total siz

HeapDump敏感信息提取工具

SvnExploit支持SVN源代码泄露全版本Dump源码