GCP GOAT is the vulnerable application for learn the GCP Security
☆72May 20, 2025Updated 10 months ago
Alternatives and similar repositories for GCP-GOAT
Users that are interested in GCP-GOAT are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆14Aug 19, 2023Updated 2 years ago
- Damn Vulnerable Cloud Application☆210Sep 12, 2018Updated 7 years ago
- A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.☆416Oct 6, 2025Updated 5 months ago
- Process dumper wrote in rust.☆14Sep 16, 2024Updated last year
- HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…☆17Jun 11, 2024Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click and start building anything your business needs.
- This lab demonstrates some of the security concerns of a default Kubernetes Engine cluster configuration and the corresponding hardening …☆17Jul 29, 2019Updated 6 years ago
- List of resources about CyberSecurity such as CTF, DFIR, Offsec, etc☆11Dec 29, 2025Updated 3 months ago
- A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.☆560May 26, 2023Updated 2 years ago
- A broken-by-design Azure environment to practice and train security skills in the cloud domain.☆27Oct 20, 2025Updated 5 months ago
- Given a list of domains and known IP and buckets that are owned, which might be susceptible to domain hijacking?☆15Sep 20, 2024Updated last year
- Awesome list for cloud security related projects☆150Oct 4, 2022Updated 3 years ago
- GCPGoat : A Damn Vulnerable GCP Infrastructure☆436Oct 29, 2024Updated last year
- A Python script to authenticate and test access to Google Cloud Platform (GCP) resources.☆17Jan 31, 2024Updated 2 years ago
- Tools and blogs I use to perform GCP red teams☆141Jul 23, 2024Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Burp Extension for copying requests safely. It redacts headers like Cookie, Authorization and X-CSRF-Token for now. More support can be a…☆18May 17, 2020Updated 5 years ago
- ☆10May 12, 2022Updated 3 years ago
- Plugin for YATAS that audits AWS accounts for misconfiguration and security issues☆15Updated this week
- Damn Vulnerable Rails app☆13Sep 20, 2012Updated 13 years ago
- BLS-Bible is a knowledge-base application that houses a collection of guides and write-ups that BLS uses for our various operations.☆30Aug 28, 2023Updated 2 years ago
- Deploys Zeek on Google Cloud☆27Feb 24, 2026Updated last month
- ☆176Apr 22, 2023Updated 2 years ago
- Simple tool to identify and remediate the use of the AWS EC2 IMDSv1.☆15Aug 12, 2021Updated 4 years ago
- GCP cloud security CTF☆48Jun 25, 2025Updated 9 months ago
- NordVPN Special Discount Offer • AdSave on top-rated NordVPN 1 or 2-year plans with secure browsing, privacy protection, and support for for all major platforms.
- Intentionally Vulnerable Serverless Functions to understand the specifics of Serverless Security Vulnerabilities☆136Dec 8, 2022Updated 3 years ago
- Retrieve the complete build history for every job ever created and executed on a given Jenkins instance.☆67Apr 25, 2025Updated 11 months ago
- A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities☆34Nov 12, 2025Updated 4 months ago
- Excel Add In Payload Generator☆14Oct 9, 2023Updated 2 years ago
- ☆17Mar 6, 2023Updated 3 years ago
- Educational Cybersecurity Gaming Experience☆10Dec 13, 2022Updated 3 years ago
- Create your own vulnerable by design AWS penetration testing playground☆438Feb 16, 2026Updated last month
- ☆14Feb 26, 2024Updated 2 years ago
- Discovery is a powerful PowerShell module that lets you probe the inner depths of the operating system.☆16Jul 26, 2014Updated 11 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- dcsync bof☆46Feb 13, 2026Updated last month
- Repository with some necessary information for you to create your PenTest consultancy☆102Jan 12, 2025Updated last year
- A toolset to juggle AWS roles for persistent access☆63Aug 14, 2024Updated last year
- Ludus role for deploying a Cobalt Strike Teamserver onto Linux servers☆18Mar 19, 2025Updated last year
- Python script to launch burp scans automatically☆32Jul 18, 2021Updated 4 years ago
- Cloud Commotion intends to cause chaos to simulate security incidents☆146Jun 18, 2024Updated last year
- Proof-of-concept code for research into GitHub Actions Cache poisoning.☆21Mar 9, 2025Updated last year