Determine privileges from cloud credentials via brute-force testing.
☆69Jul 25, 2026Updated 2 months ago
Alternatives and similar repositories for CloudPrivs
Users that are interested in CloudPrivs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆76Aug 2, 2023Updated 3 years ago
- ☆28Dec 28, 2017Updated 8 years ago
- Golang Shlyuz Implant Implementation☆13May 23, 2025Updated last year
- Syscall BOF to arbitrarily add/detract process token privilege rights.☆68Jul 10, 2024Updated 2 years ago
- C# alternative to the linux "cat" command... Prints file contents to console. For use with Cobalt Strike's Execute-Assembly☆15Jul 15, 2021Updated 5 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- treafik fronted c2 examples☆25Dec 6, 2020Updated 5 years ago
- Beacon Object File allowing creation of Beacons in different sessions.☆83May 23, 2022Updated 4 years ago
- This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapsho…☆124Nov 2, 2019Updated 6 years ago
- An Evil OIDC Server☆53Oct 19, 2022Updated 3 years ago
- POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF☆59Sep 20, 2023Updated 3 years ago
- A BOF.NET program to split a file into smaller chunks and email it via a specified SMTP relay.☆17Jun 24, 2021Updated 5 years ago
- Beacon Object Files used for Cobalt Strike☆19Jul 18, 2023Updated 3 years ago
- Enumerate valid users within Microsoft Teams and OneDrive with clean output.☆62Feb 4, 2025Updated last year
- Script to setup a phishing server on the cloud☆13Apr 30, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- A fast enumeration tool for publicly exposed Azure Storage blobs.☆124Mar 25, 2023Updated 3 years ago
- RedBlock is an Nginx module designed for offensive security operations and red teaming. This module empowers security professionals to ea…☆24Jan 21, 2024Updated 2 years ago
- Authorized cloud adversary simulation and validation toolkit☆109Jul 15, 2026Updated 2 months ago
- Ansible role to deploy RedELK server☆18Sep 11, 2023Updated 3 years ago
- Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon☆338Jun 6, 2022Updated 4 years ago
- A set of hashcat hcmask files, prioritized by cracking efficiency... and the hcmask_Generator_9000.xlsx tool.☆26Dec 17, 2023Updated 2 years ago
- Extended Process List (Search functionality)☆28Jan 23, 2021Updated 5 years ago
- ☆37May 8, 2022Updated 4 years ago
- Microsoft Graph API post-exploitation toolkit☆94Jul 13, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆40Jun 9, 2021Updated 5 years ago
- PoC MSI payload based on ASEC/AhnLab's blog post☆25Sep 19, 2022Updated 4 years ago
- A Python script to authenticate and test access to Google Cloud Platform (GCP) resources.☆19Jan 31, 2024Updated 2 years ago
- My implementation of the GIUDA project in C++☆189Jul 25, 2023Updated 3 years ago
- ☆125May 12, 2021Updated 5 years ago
- cloudgrep is grep for cloud storage☆333Mar 14, 2026Updated 6 months ago
- Python module for running BOFs☆81Nov 28, 2025Updated 10 months ago
- EC2StepShell is an AWS post-exploitation tool for getting high privileges reverse shells in public or private EC2 instances.☆71Sep 20, 2024Updated 2 years ago
- Cobalt Strike + Brute Ratel C4 Beacon Object File (BOF) Conversion of the Mockingjay Process Injection Technique☆157Nov 7, 2023Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Strstr with user-supplied needle and filename as a BOF.☆32Sep 27, 2021Updated 5 years ago
- Small utility to chunk up a large BloodHound JSON file into smaller files for importing.☆98Apr 13, 2023Updated 3 years ago
- Hide from the InstanceCredentialExfiltration GuardDuty finding by using VPC Endpoints☆122Jul 13, 2025Updated last year
- ☆56Apr 25, 2023Updated 3 years ago
- A pentesting tool for enumeration/download/graphical analysis of OCI content. Includes an OpenGraph generator for Bloodhound-style analys…☆25Updated this week
- RCE exploit for CVE-2023-3519☆229Aug 23, 2023Updated 3 years ago
- Utility to analyse, ingest and push out credentials from common data sources during an internal penetration test.☆19Jun 12, 2022Updated 4 years ago