#google

cloudlist
sponsor
cloudlist

Cloudlist is a tool for listing Assets from multiple Cloud Providers.

driftctl
driftctl

Detect, track and alert on infrastructure drift.

Zphisher
Zphisher

An automated phishing tool with 30+ templates.

OpenBuckets
OpenBuckets

Online platform for finding open buckets in cloud storage systems effortlessly.

BucketLoot
BucketLoot

An automated S3-compatible bucket inspector.

gcp_scanner
gcp_scanner

A comprehensive scanner for Google Cloud.

GatherContacts
GatherContacts

Burp Suite extension to pull employee names from Google and Bing LinkedIn search results.

cloudsploit
cloudsploit

Cloud Security Posture Management (CSPM).

DorkGPT
DorkGPT

Generate Google dorks with AI.

google-authenticator-exporter
google-authenticator-exporter

Get the TOTP secrets exported by Google Authenticator.

SocialPwned
SocialPwned

Allows to get the emails from a target published in social networks to find possible credentials.

GD-Thief
GD-Thief

Exfiltrate files from a target's Google Drive that you have access to, via Google's API.

GCPBucketBrute
GCPBucketBrute

Enumerate Google Storage buckets, check the access and if they can be privilege escalated.

ScoutSuite
ScoutSuite

Multi-cloud security auditing tool.

go-dork
go-dork

The fastest dork scanner written in Go.

GrayhatWarfare
GrayhatWarfare

Search for buckets and URL shorteners.

Covenant
Covenant

Collaborative C2 framework for red teamers.

AWS Extender CLI
AWS Extender CLI

Command-line script to test cloud storage for common misconfiguration issues.

Burp-AnonymousCloud
Burp-AnonymousCloud

Performs passive scan to identify buckets and test them for publicly accessible vulnerabilities.

CloudBrute
CloudBrute

Awesome cloud enumerator.

Rusty Hog
Rusty Hog

A suite of secret scanners built in Rust for performance.

MSDorkDump
MSDorkDump

Google Dork File Finder.

grafana-ssrf
grafana-ssrf

Authenticated SSRF in Grafana.

httprebind
httprebind

Automatic tool for DNS rebinding-based SSRF attacks.

GHunt
GHunt

Offensive Google framework.

Metagoofil
Metagoofil

Search Google and download specific file types.

cloud_enum
cloud_enum

Multi-cloud OSINT tool. Enumerate public resources in AWS, Azure, and Google Cloud.

Cloudfox
Cloudfox

Automating situational awareness for cloud penetration tests.

GRecon
GRecon

Run a Google based passive recon against your scope.