Search the Community

S3cret Scanner: Hunting For Secrets Uploaded To Public S3 Buckets S3cret Scanner tool is designed to provide a complementary layer for the Amazon S3 Security Best Practices by proactively hunting secrets in public S3 buckets. Can be executed as a scheduled task or On-Demand Automation workflow The automation will perform the following actions: List the public buckets in the account (Set with ACL of Public or objects can be public) List the textual or sensitive files (i.e. .p12, .pgp and more) Download, scan (using truffleHog3), and delete the files from the disk, once done evaluating, one by one. The logs will be created in the logger.log file. [hide][Hidden Content]]

Web Cache Vulnerability Scanner Web Cache Vulnerability Scanner (WCVS) is a fast and versatile CLI scanner for web cache poisoning developed by Hackmanit. The scanner supports many different web cache poisoning techniques, includes a crawler to identify further URLs to test, and can adapt to a specific web cache for more efficient testing. It is highly customizable and can be easily integrated into existing CI/CD pipelines. Features Support for 9 web cache poisoning techniques: Unkeyed header poisoning Unkeyed parameter poisoning Parameter cloaking Fat GET HTTP response splitting HTTP request smuggling HTTP header oversize (HHO) HTTP meta character (HMC) HTTP method override (HMO) Analyzing a web cache before testing and adapting to it for more efficient testing Generating a report in JSON format Crawling websites for further URLs to scan Routing traffic through a proxy (e.g., Burp Suite) Limiting requests per second to bypass rate limiting [hide][Hidden Content]]