reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio
TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control systems, cloud storage, and filesystems. It functions as a git secret detector that enumerates hidden commits and a cloud storage security auditor for inspecting container images and storage buckets. The project is distinguished by a credential verification engine that tests discovered secrets against service APIs to confirm they are active, which eliminates false positive alerts. It further analyzes these verified credentials to determine the specific access levels and resources t
S3 bucket finder from html,js and bucket misconfiguration testing tool
Chrome and Firefox extension that lists Amazon S3 Buckets while browsing
Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities
Principalele funcționalități ale codewatchorg/burp-anonymouscloud sunt: Cloud Security Tools, Cloud Storage Auditing.
Alternativele open-source pentru codewatchorg/burp-anonymouscloud includ: six2dez/reconftw — reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the… dxa4481/trufflehog — TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control… abuvanth/kicks3 — S3 bucket finder from html,js and bucket misconfiguration testing tool. ankane/s3tk — A security toolkit for Amazon S3. anvilventures/aws-sigv4 — Anvil Secure's Burp extension for signing AWS requests with SigV4. alecblance/s3bucketlist — Chrome and Firefox extension that lists Amazon S3 Buckets while browsing.