Misconfig Mapper

[neutrinophoton]

Recurssive misconfig check for all subdomains like cloud bucket check.
https://github.com/intigriti/misconfig-mapper

[TheTechromancer]

Good suggestion! We don't have anything quite like this yet. However we have similar functionality with nuclei and its technology detection, and are already discovering recursive permutations of subdomains (with dnsbrute_mutations) and storage buckets (with the bucket_* modules).

[liquidsec]

I like the idea, but I think this just feels like someone's pet project to make a massively scaled down version of Nuclei that focuses on specific subset of templates.

The problem with that is, nuclei is a big enough project it's not going anywhere. We can therefore justify spending a lot of time managing an integration. For these little one off tools like this, they could go dark any time, leaving us with a useless module and more work to clean up. Looks like that may have already happened - not seeing any activity in about 4 months.

IMO the creators of that project should have just contributed to nuclei with some templates.