red shadow - Lightspin AWS Vulnerability Scanner

https://reconshell.com/red-shadow-lightspin-aws-vulnerability-scanner/

#PrivilegeEscalation #exploit #Exploitation #AWS
#Vulnerability #Scanner

Osmedeus

Fully automated offensive security framework for reconnaissance and vulnerability scanning

Features
— Subdomain Scan.
— Subdomain TakeOver Scan.
— Screenshot the target.
— Basic recon like Whois, Dig info.
— Web Technology detection.
— IP Discovery.
— CORS Scan.
— SSL Scan.
— Wayback Machine Discovery.
— URL Discovery.
— Headers Scan.
— Port Scan.
— Vulnerable Scan.
— Seperate workspaces to store all scan output and details logging.
— REST API.
— React Web UI.
— Support Continuous Scan.
— Slack notifications.
— Easily view report from commnad line.

https://github.com/j3ssie/Osmedeus

#osint #vulnerability #scanner #bugbounty

S3Scanner

Scan for open S3 buckets and dump the contents

Features:
— Multi-threaded scanning
— Supports tons of S3-compatible APIs
— Scans all bucket permissions to find misconfigurations
— Dump bucket contents to a local folder
— Docker support

https://github.com/sa7mon/S3Scanner

#aws #s3 #bucket #scanner

🔎 FVLCN Secrets Hunter

One more, but may be just one secret scanner for your CI.

Unlike traditional tools, it analyzes variables where high entropy strings are assigned, such as secret_token = “......”;
api_key = “....”, for comprehensive coverage.

🔗 https://github.com/FVLCN/secrets-hunter

#tool #scanner #devsecops #appsec