Proof of concept code for Datadog Security Labs referenced exploits.
☆451Sep 14, 2026Updated last month
Alternatives and similar repositories for security-labs-pocs
Users that are interested in security-labs-pocs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Container Excape PoC for CVE-2022-0847 "DirtyPipe"☆77Apr 20, 2022Updated 4 years ago
- Granular, Actionable Adversary Emulation for the Cloud☆2,443Updated this week
- CVE-2022-21449 Proof of Concept demonstrating its usage with a client running on a vulnerable Java version and a malicious TLS server☆121Mar 15, 2026Updated 7 months ago
- Custom scripts for the PIPER Burp extensions.☆98Sep 24, 2023Updated 3 years ago
- Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.☆618Mar 4, 2021Updated 5 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Repository to store exploits created by Assetnotes Security Research team☆184Nov 7, 2023Updated 2 years ago
- ☆13Sep 28, 2023Updated 3 years ago
- InQL is a robust, open-source Burp Suite extension for advanced GraphQL testing, offering intuitive vulnerability detection, customizable…☆1,813Updated this week
- 🖇️ equivalence table between OWASP ASVS standard and STRIDE threat modeling methodology.☆76Aug 22, 2024Updated 2 years ago
- Automating situational awareness for cloud penetration tests.☆2,618Updated this week
- POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF☆59Sep 20, 2023Updated 3 years ago
- Threatest is a CLI and Go framework for end-to-end testing threat detection rules.☆353Updated this week
- ☆1,203Sep 2, 2022Updated 4 years ago
- Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).☆91Jan 28, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Burp Suite Extension useful to verify OAUTHv2 and OpenID security☆182Oct 26, 2024Updated 2 years ago
- A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.☆2,333Jul 14, 2024Updated 2 years ago
- Detects request smuggling via HTTP/2 downgrades.☆93Jul 30, 2022Updated 4 years ago
- 🍪 CookieMonster helps you detect and abuse vulnerable implementations of stateless sessions.☆1,018Jan 10, 2025Updated last year
- Peirates - Kubernetes Penetration Testing tool☆1,489Oct 29, 2026Updated last week
- An Evil OIDC Server☆53Oct 19, 2022Updated 4 years ago
- Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized en…☆1,227Feb 3, 2025Updated last year
- ☆93Sep 18, 2021Updated 5 years ago
- Threat matrix for CI/CD Pipeline☆772May 31, 2026Updated 5 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- JNDI-Exploitation-Kit（A modified version of the great JNDI-Injection-Exploit created by @welk1n. This tool can be used to start an HTTP S…☆946Sep 2, 2025Updated last year
- The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.☆5,386May 19, 2026Updated 5 months ago
- Azure Security Resources and Notes☆1,787Feb 17, 2026Updated 8 months ago
- An implementation of infrastructure-as-code scanning using dynamic tooling.☆56Jan 18, 2022Updated 4 years ago
- 🔑 Authz0 is an automated authorization test tool. Unauthorized access can be identified based on URLs and Roles & Credentials.☆429Oct 14, 2026Updated 3 weeks ago
- ☆15Oct 25, 2021Updated 5 years ago
- SSRF (Server Side Request Forgery) testing resources☆2,509Oct 12, 2024Updated 2 years ago
- Notes about attacking Jenkins servers☆2,101Jul 10, 2024Updated 2 years ago
- Link sources to sinks in C# applications.☆149Apr 10, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Kubernetes focused container assessment and context discovery tool for penetration testing☆491Nov 7, 2025Updated 11 months ago
- Tool to check for dependency confusion vulnerabilities in multiple package management systems☆793Aug 19, 2024Updated 2 years ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆1,108Aug 5, 2026Updated 3 months ago
- This repo has been replaced by https://www.cloudvulndb.org☆723Jun 29, 2022Updated 4 years ago
- Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration☆307Updated this week
- An exhaustive list of all the possible ways you can chain your Blind SSRF vulnerability☆995Dec 31, 2021Updated 4 years ago
- The cheat sheet about Java Deserialization vulnerabilities☆3,189May 26, 2023Updated 3 years ago