Tool for building Kubernetes attack paths
☆1,017Oct 28, 2026Updated this week
Alternatives and similar repositories for KubeHound
Users that are interested in KubeHound are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆193May 29, 2026Updated 5 months ago
- Peirates - Kubernetes Penetration Testing tool☆1,488Oct 25, 2026Updated last week
- Granular, Actionable Adversary Emulation for the Cloud☆2,440Updated this week
- All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.☆388Oct 26, 2026Updated last week
- Kubernetes focused container assessment and context discovery tool for penetration testing☆491Nov 7, 2025Updated 11 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 🧰 Multi Tool Kubernetes Pentest Image☆266Mar 30, 2026Updated 7 months ago
- Automating situational awareness for cloud penetration tests.☆2,615Updated this week
- A tool to scan Kubernetes cluster for risky permissions☆1,434May 25, 2025Updated last year
- Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on p…☆5,927Apr 16, 2026Updated 6 months ago
- The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).☆384Aug 28, 2026Updated 2 months ago
- Pentesting framework for GCP & Google Workspace that enumerates/downloads data that feeds into a BloodHound Opengraph model. Includes cre…☆317Updated this week
- Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …☆378Oct 20, 2026Updated last week
- Hunt for security weaknesses in Kubernetes clusters☆5,087Mar 19, 2024Updated 2 years ago
- GitHub Actions Pipeline Enumeration and Attack Tool☆10Apr 24, 2026Updated 6 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Kubernetes exploitation tool☆362Feb 25, 2026Updated 8 months ago
- A collection of manifests that will create pods with elevated privileges.☆714Dec 30, 2025Updated 10 months ago
- Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego☆350Mar 21, 2025Updated last year
- Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized en…☆1,226Feb 3, 2025Updated last year
- Halberd : Multi-Cloud Agentic Attack Tool☆350Apr 8, 2026Updated 6 months ago
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆116Jan 2, 2025Updated last year
- DavRelayUp - a universal no-fix local privilege escalation in domain-joined windows workstations where LDAP signing is not enforced (the …☆582Jun 5, 2023Updated 3 years ago
- SOAPHound is a custom-developed .NET data collector tool which can be used to enumerate Active Directory environments via the Active Dire…☆898Feb 3, 2024Updated 2 years ago
- Azure DevOps Services Attack Toolkit☆317Mar 15, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Post-exploit a compromised etcd, gain persistence and remote shell to nodes.☆94May 7, 2024Updated 2 years ago
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.☆351Oct 26, 2026Updated last week
- AD Miner is an Active Directory audit tool that leverages cypher queries to crunch data from the #Bloodhound graph database to uncover se…☆1,584Mar 18, 2026Updated 7 months ago
- A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.☆379Mar 24, 2026Updated 7 months ago
- An ADCS Exploitation Automation Tool Weaponizing Certipy and Coercer☆750May 19, 2023Updated 3 years ago
- An offensive data enrichment pipeline☆1,007Updated this week
- Active Directory data ingestor for BloodHound Legacy written in Rust. 🦀☆1,183Oct 21, 2024Updated 2 years ago
- FalconHound is a blue team multi-tool. It allows you to utilize and enhance the power of BloodHound in a more automated fashion. It is de…☆829Apr 18, 2026Updated 6 months ago
- Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security…☆11,837Updated this week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The Kubernetes Security Profiles Operator☆877Oct 26, 2026Updated last week
- A curated list of resources about detecting threats and defending Kubernetes systems.☆413Sep 2, 2023Updated 3 years ago
- Security risk analysis for Kubernetes resources☆1,488Oct 8, 2026Updated 3 weeks ago
- A C# utility for interacting with SCCM☆707Sep 29, 2026Updated last month
- SCCMHunter is a post-ex tool built to streamline identifying, profiling, and attacking SCCM related assets in an Active Directory domain.…☆961Updated this week
- A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.☆2,345Apr 24, 2026Updated 6 months ago
- A collection of Azure AD/Entra tools for offensive and defensive security purposes☆2,752Oct 22, 2026Updated last week