Tools: cloud-infrastructure (23)

PowerShell toolkit for Azure AD and Entra ID assessment, including tenant reconnaissance and hybrid identity attack-path analysis.

Advanced attack surface mapping framework for DNS and subdomain enumeration with graph correlation and extensive data-source support.

Python tool that enumerates AWS S3 buckets and optionally downloads accessible objects using keyword and pattern-based discovery.

Open-source cloud bucket discovery utility with limited current documentation and unclear maintenance signals.

Infrastructure-as-code security scanner that checks Terraform, CloudFormation, Kubernetes, and other cloud configs against policy rules.

Policy-as-code engine for cloud governance and security that can detect and remediate risky cloud configurations.

Multi-cloud enumeration tool that looks for exposed AWS, Azure, and GCP storage assets from target naming patterns.

DNS enumeration script for recon workflows, supporting record discovery, zone transfer checks, brute-force, and reverse lookups.

Google Cloud Storage bucket enumeration utility for identifying publicly accessible or weakly protected buckets.

Go-based Azure blob storage enumeration utility designed for fast discovery of publicly exposed containers and blobs.

S3 bucket brute-forcing utility that generates candidate names from permutations and checks bucket accessibility.

PowerShell collection focused on Azure security assessment, including subscription discovery and cloud service misconfiguration checks.

Cloud security posture and compliance assessment framework covering AWS, Azure, GCP, Kubernetes, and SaaS surfaces.

Search interface for publicly indexed cloud object storage buckets and files across multiple providers.

Azure AD exploration framework for dumping tenant objects, principals, and permissions to support attack-path and privilege analysis.

Command-line scanner for enumerating and checking S3 bucket misconfigurations across AWS and compatible object storage services.

Multi-cloud auditing tool that inventories cloud resources and highlights security risks in an interactive HTML report.

Automated OSINT collection tool with 200+ modules for reconnaissance and threat intelligence.

SQL interface over cloud APIs and services, enabling ad hoc querying of AWS, Azure, GCP, and many other data sources.

Graph-based Azure reconnaissance platform that maps cloud attack paths and trust relationships using Neo4j-backed visualization.

Fast passive subdomain discovery utility that aggregates results from many curated OSINT and API-backed sources.

Passive subdomain enumeration tool that aggregates subdomains from public search engines and certificate-related sources.

Command-line tool for gathering emails, subdomains, IPs, and URLs from public sources.