Locked ShadowClone: Boost Your Pentesting Performance in Seconds

[itsMe]

This is the hidden content, please

• Sign In
• or
• Sign Up

What is ShadowClone?

ShadowClone is designed to delegate time-consuming tasks to the cloud by distributing the input data to multiple serverless functions (AWS Lambda, Azure Functions, etc.) and running the tasks in parallel resulting in a huge performance boost!

ShadowClone uses IBM’s awesome Lithops library to distribute the workloads to serverless functions which is at the core of this tool. Effectively, it is a proof-of-concept script showcasing the power of cloud computing for performing our regular pentesting tasks.

These are a few of the use cases:

    DNS Bruteforce uses a very large wordlist within seconds
    Fuzz through a huge wordlist using ffuf on a single host
    Fuzz a list of URLs on a single path all from different IP addresses
    Port scans thousands of IPs in seconds
    Run a nuclei template on a list of hosts

Features

    Extremely fast
    No need to maintain a VPS (or a fleet of it :))
    Costs almost nothing per month
        Compatible with free tiers of most cloud services
    Cloud agnostic
        The same script works with AWS, GCP, Azure, etc.
    Supports up to 1,000 parallel invocations
    Dynamically decide the number of invocations
    Run any tool in parallel on the cloud
    Pipe output to other tools

This is the hidden content, please

• Sign In
• or
• Sign Up