Screenshots

Example Usage

pip install kosty

# Full audit — cost + security across 30 services
kosty audit --output all

# External attack surface mapping
kosty public-exposure --output console

# IAM privilege escalation detection (21 patterns)
kosty iam check-privilege-escalation --deep

# Organization-wide scan
kosty audit --organization --max-workers 20 --output all

See also

Impacket-secretsdump

Open Source Kali

Dumps secrets remotely using a variety of techniques including DCSync (without running code on DC), …

mimipenguin

Free

A tool to dump the login password from the current linux user…

Evil-WinRM

Open Source Kali

Full-featured WinRM shell for hacking and penetration testing. Supports pass-the-hash, file upload/d…

GTFOBins

Open Source