Dufflebag is a tool that searches through public Elastic Block Storage (EBS) snapshots for secrets that may have been accidentally left in. It is organized as an Elastic Beanstalk application, designed to be used within an AWS environment due to the complexity of reading EBS volumes. The tool automagically scales and can be easily torn down, but requires additional AWS IAM permissions to function properly.
FEATURES
SIMILAR TOOLS
This article discusses protected accounts and groups in Active Directory, providing examples and screenshots to illustrate key concepts.
A platform that discovers, manages and secures non-human identities like service accounts, API keys and secrets across enterprise environments.
DumpsterDiver is a tool for analyzing big volumes of data to find hardcoded secrets like keys and passwords.
PINNED

Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.