reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio
TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control systems, cloud storage, and filesystems. It functions as a git secret detector that enumerates hidden commits and a cloud storage security auditor for inspecting container images and storage buckets. The project is distinguished by a credential verification engine that tests discovered secrets against service APIs to confirm they are active, which eliminates false positive alerts. It further analyzes these verified credentials to determine the specific access levels and resources t
Chrome and Firefox extension that lists Amazon S3 Buckets while browsing
This tool is based in S3Cruze tool of @JR0ch17. Translated from python2 to python3, remove the feature of bruteforce. The other feature still remains and upgraded. You can check a single domain or a subdomain list from your recon results. This tool will get the CNAME first if it's a valid Amazon…
The main features of 0xspade/s3cario are: Cloud Storage Auditing.
Open-source alternatives to 0xspade/s3cario include: six2dez/reconftw — reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the… dxa4481/trufflehog — TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control… alecblance/s3bucketlist — Chrome and Firefox extension that lists Amazon S3 Buckets while browsing. codewatchorg/burp-anonymouscloud — Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible… cr0hn/festin — FestIn - Open S3 Bucket Scanner. ankane/s3tk — A security toolkit for Amazon S3.
