Interactive reference guide for pentesting DevOps pipelines. 60+ tools with attack vectors. Credits: Tom & Colbert from Accenture (FusionX)
☆36Nov 25, 2025Updated 10 months ago
Alternatives and similar repositories for devops-attack-surface
Users that are interested in devops-attack-surface are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆34Apr 2, 2026Updated 6 months ago
- Interactive reference guide for pentesting DevOps pipelines. 60+ tools with attack vectors. Credits: Tom & Colbert from Accenture (Fusion…☆53Oct 8, 2025Updated last year
- ☆68Feb 6, 2026Updated 8 months ago
- Parseltongue 3.1 - LLM Payload Crafter for AI safety research☆191Nov 14, 2025Updated 10 months ago
- ☆21Jul 11, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- AI Code Security Anti-Patterns distilled from 150+ sources to help LLMs generate safer code.☆601Feb 24, 2026Updated 7 months ago
- A simple Bash script to discover all domains associated with a specific Microsoft 365 tenant - new replacement for check_mdi☆67Sep 23, 2025Updated last year
- External C2 is a specification to allow third-party programs to act as a communication layer for Cobalt Strike’s Beacon payload.☆22Jul 17, 2025Updated last year
- Ludus role for deploying a Cobalt Strike Teamserver onto Linux servers☆19Mar 19, 2025Updated last year
- Periodically check hashcat cracking progress and notify of success.☆10Dec 18, 2018Updated 7 years ago
- Bruteforcing from various scanner output - Automatically attempts default creds on found services.☆15Mar 10, 2025Updated last year
- Ruby On Rails unrestricted render() exploit☆16Feb 9, 2018Updated 8 years ago
- Extract the Procedures (TTP) from CTI reports☆18Dec 13, 2025Updated 9 months ago
- executing shellcode directly from a python variable☆30Dec 20, 2025Updated 9 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Rehashing APIs to prevent hash based detection☆14Jan 7, 2025Updated last year
- Golang Cobalt Strike Rest API Client☆19Apr 10, 2026Updated 5 months ago
- a prompt injection scanner for custom LLM applications☆26Feb 16, 2025Updated last year
- Items related to the RedELK workshop given at security conferences☆29Sep 28, 2023Updated 3 years ago
- ☆30Sep 9, 2026Updated last month
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆14Feb 16, 2026Updated 7 months ago
- Helper script for BloodHound to automatically add relationships between multiple accounts owned by the same individual☆15Jul 13, 2022Updated 4 years ago
- ☆16Aug 6, 2026Updated 2 months ago
- The Mobile Security Testing Guide (MSTG) is a comprehensive manual for mobile app security development, testing and reverse engineering.☆11Apr 6, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A BOF designed to inspect processes memory and addresses☆41Apr 19, 2026Updated 5 months ago
- Docker container for running CobaltStrike 4.7 and above☆26Mar 20, 2025Updated last year
- ☆11Jun 26, 2024Updated 2 years ago
- Kibana app for RedELK☆17Mar 19, 2023Updated 3 years ago
- A modular external attack surface mapping tool integrating tools for automated reconnaissance and bug bounty workflows.☆77Apr 6, 2025Updated last year
- FrogPost: postMessage Security Testing Tool☆108Dec 4, 2025Updated 10 months ago
- Step-by-step documentation on how to decrypt SCCM database secrets offline☆49Oct 20, 2025Updated 11 months ago
- Network Capture DNS answers☆22Sep 25, 2024Updated 2 years ago
- A LLM CTF Challenge☆45Sep 23, 2026Updated 2 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- The Arcanum Prompt Injection Taxonomy☆777Jun 29, 2026Updated 3 months ago
- This is the Git repository for the Modern Red Teaming workshop given at SINCON2024.☆13May 23, 2024Updated 2 years ago
- ☆17Apr 9, 2026Updated 6 months ago
- Go module that returns supported regions for a service or supported services for a region☆18Dec 12, 2025Updated 9 months ago
- Agressor script for Cobalt Strike to mark users as owned in bloodhound from the Cobalt Strike credentials tab.☆14Dec 21, 2019Updated 6 years ago
- ☆16Jan 15, 2026Updated 8 months ago
- Cortex EDR Ransomware protection Bypass☆27Feb 8, 2025Updated last year