
cdncheck
A utility to detect various technology for a given IP address.

A utility to detect various technology for a given IP address.

A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.

Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

A lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky…

All-in-one penetration testing toolkit aggregating 185+ tools across 20 categories including information gathering, web & wireless attacks, phishing,…

Determine privileges from cloud credentials via brute-force testing.

Scan for misconfigured S3 buckets across S3-compatible APIs!

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

Fast and stealthy Amazon S3 bucket enumeration tool for pentesters.

A PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.

CVE-2026-44578 scanner and exploit tool for SSRF in Next.js WebSocket upgrade handler. Detects vulnerable versions, extracts cloud metadata, and…

A tool for checking if MFA is enabled on multiple Microsoft Services

An S3 account ID enumeration and bucket discovery tool

Hunt for AI coding artifacts containing secrets.

Untitled Goose Tool is a robust and flexible hunt and incident response tool that adds novel authentication and data gathering methods in order to…

Whois for the Cloud: Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.