Operational arsenal for authorized external red-team and bug-bounty recon. Concrete probes, wordlists, regexes, dorks, curl one-liners for: subdomain enum, GraphQL/Swagger/REST discovery, identity fabric (Entra/Okta/ADFS/Google/SAML/M365 deep — Teams/SharePoint/OneDrive), cloud bucket enum (S3/GCS/Azure), CDN/WAF bypass, origin discovery, vendor fingerprinting (Citrix/F5/Pulse/Fortinet/PaloAlto/Cisco/VMware), CI/CD exposure, 48-pattern secret-scan catalog (AWS/GCP/GitHub/Stripe/Slack/Anthropic/O
Install
KitScout test notes
Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.
Similar tools
- cloud-penetration-testing 49,672 ★
Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services - ethical-hacking-methodology 49,672 ★
Master the complete penetration testing lifecycle from reconnaissance through reporting. This skill covers the - linux-privilege-escalation 49,672 ★
Execute systematic privilege escalation assessments on Linux systems to identify and exploit misconfigurations - memory-forensics 42,495 ★
Master memory forensics techniques including memory acquisition, process analysis, and artifact extraction usi - mtls-configuration 42,495 ★
Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust