cloudfrunt
Domain scanner
A tool for identifying misconfigured CloudFront domains to prevent domain hijacking
A tool for identifying misconfigured CloudFront domains
346 stars
10 watching
67 forks
Language: Python
last commit: over 4 years ago
Linked from 1 awesome list
awscloudfrontsecuritysecurity-toolsvulnerability-detection
yeyintminthuhtut/awesome-red-teamingRelated projects:
| Repository | Description | Stars |
|---|---|---|
 m0rtem/cloudfail | Reconnaissance tool that gathers information about a Cloudflare-protected target to discover its server location using misconfigured DNS and old database records. | 2,237 |
 deepfence/threatmapper | An application protection platform that monitors and analyzes cloud-native applications for vulnerabilities and threats. | 4,845 |
 digininja/cloudstoragefinder | A collection of tools to search public data in various cloud storage systems | 71 |
 anirudhbiyani/findmytakeover | Detects DNS record misconfigurations that could be exploited by attackers | 135 |
 bishopfox/cloudfox | An open-source tool to help penetration testers gather information about cloud environments and identify potential vulnerabilities. | 1,953 |
 jordanpotti/cloudscraper | A tool to spider and search cloud resources like AWS, Azure, and Digital Ocean for potential vulnerabilities. | 501 |
 prevade/cloudjack | Checks AWS accounts for subdomain hijacking vulnerabilities | 84 |
 0xsha/cloudbrute | A tool to automatically discover and enumerate cloud infrastructure and applications across multiple providers. | 895 |
 diogo-fernan/domfind | A tool to find identical domain names with SOA DNS records under different TLDs | 24 |
 edoardottt/csprecon | Tools for discovering new target domains using Content Security Policy | 382 |
| bishopfox/smogcloud | Automatically identifies and monitors cloud assets exposed to the internet without authorization | 332 |
 mr-un1k0d3r/catmyphish | A tool used to search for and categorize expired domains that can be used during red teaming engagements. | 439 |
| deepfence/yarahunter | Automated malware scanning tool for containers and filesystems using YARA ruleset | 1,268 |
 andresriancho/nimbostratus | Tools to discover vulnerabilities in Amazon cloud infrastructure | 447 |
 assetnote/surf | A tool that identifies and filters potential Server-Side Request Forgery (SSRF) vulnerabilities in cloud environments by probing external hosts. | 533 |