
goblob
A fast enumeration tool for publicly exposed Azure Storage blobs.

A fast enumeration tool for publicly exposed Azure Storage blobs.

Determine privileges from cloud credentials via brute-force testing.

The exploit server for out-of-band findings. Point a target at a domain you own. Every HTTP request and every email it sends back lands in a…

Apache CloudStack vulnerability allows unauthorized access to annotations on certain resources.

Exploits CVE-2026-42826 to enumerate and extract sensitive Azure DevOps data via unauthenticated REST API requests: pipeline YAML, variable groups,…

Enumerate valid users within Microsoft Teams and OneDrive with clean output.

Fast YAML-based vulnerability scanner with template-driven detection engine for automated security testing across web apps, APIs, networks, DNS, and…

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…

AI-powered bug bounty hunting toolkit that works with or without subscription.

AI-powered bug bounty hunting toolkit that works with or without subscription.

A Modern Orchestration Engine for Security

Scope aggregation tool for HackerOne, Bugcrowd, Intigriti, YesWeHack, and Immunefi!

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

Field-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

Security Tool to Look For Interesting Files in S3 Buckets

Collects Azure tenant data (users, groups, roles, resources) and exports it for BloodHound attack path analysis in cloud penetration testing and red…