k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.
☆300Aug 30, 2021Updated 5 years ago
Alternatives and similar repositories for k0otkit
Users that are interested in k0otkit are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Metarget is a framework providing automatic constructions of vulnerable infrastructures.☆1,427Jul 22, 2026Updated 3 months ago
- 📦 Make security testing of K8s, Docker, and Containerd easier.☆4,778May 1, 2026Updated 5 months ago
- awesome resources about cloud native security 🐿☆327Nov 4, 2023Updated 2 years ago
- [WIP] 整理过去我和K8s、容器、虚拟化相关的分享 🧐☆3,167Nov 6, 2025Updated 11 months ago
- 《云原生安全：攻防实践与体系构建》资料仓库☆780Feb 19, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- （周瑜）Java - SpringBoot 持久化 WebShell（不仅仅是SpringBoot，适合任何符合JavaEE规范的服务）☆615Dec 29, 2021Updated 4 years ago
- 🌶 一些和容器化/容器编排/服务网格等技术相关的安全代码片段[自用备份]☆81Jul 23, 2021Updated 5 years ago
- ☆16Jan 5, 2021Updated 5 years ago
- 模拟Cobalt Strike的Beacon与C2通信过程，实现了基于HTTP协议的Linux C2☆139Jun 25, 2020Updated 6 years ago
- a PoC for Linux to get around agents that log commands being executed, without root privilege. Linux低权限模糊化执行的程序名和参数，避开基于execve系统调用监控的命令日志☆240May 8, 2019Updated 7 years ago
- Burp suite 分块传输辅助插件☆2,026Feb 23, 2022Updated 4 years ago
- 阿里云ECS、策略组辅助小工具☆876Mar 2, 2023Updated 3 years ago
- TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.☆643Nov 30, 2022Updated 3 years ago
- Flask 内存马☆314Mar 26, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Java RCE 回显测试代码☆1,008Oct 15, 2020Updated 6 years ago
- WINDOWS TELEMETRY权限维持☆256Jul 2, 2020Updated 6 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…☆454Mar 24, 2022Updated 4 years ago
- ServerScan一款使用Golang开发的高并发网络扫描、服务探测工具。☆1,658Jun 16, 2024Updated 2 years ago
- A Bypass Anti-virus Software Lateral Movement Command Execution Tool☆1,464Jan 20, 2025Updated last year
- 利用任意文件下载漏洞循环下载反编译 Class 文件获得网站 Java 源代码☆709May 10, 2021Updated 5 years ago
- 一个各种方式突破Disable_functions达到命令执行的shell☆1,190Oct 17, 2023Updated 3 years ago
- 一些Java RASP demo☆11Sep 26, 2019Updated 7 years ago
- 六大云存储，泄露利用检测工具☆1,266Mar 28, 2025Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- A helpful Java Deserialization exploit framework.☆1,246Feb 17, 2025Updated last year
- 适用于weblogic和Tomcat的无文件的内存马(memshell)☆271Mar 4, 2022Updated 4 years ago
- docker container escape check || Docker 容器逃逸检测☆665Apr 19, 2022Updated 4 years ago
- Elkeid is an open source solution that can meet the security requirements of various workloads such as hosts, containers and K8s, and ser…☆2,694May 11, 2026Updated 5 months ago
- 基于亚马逊S3\阿里云OSS\腾讯COS通信隧道的远程管理工具☆329Oct 10, 2020Updated 6 years ago
- Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的…☆923Jan 7, 2026Updated 9 months ago
- 总结了20+.Net反序列化文章，持续更新☆744Apr 3, 2024Updated 2 years ago
- Kubernetes security notes and best practices☆732Apr 15, 2022Updated 4 years ago
- Hyuga is a tool for monitoring Out-of-Band (OOB) traffic, supporting DNS, HTTP, LDAP, RMI, and DNS-Rebinding。🪤☆541Dec 27, 2025Updated 10 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- a simple tool to detect potential security threat in php code☆317Sep 9, 2024Updated 2 years ago
- ☆154Jun 24, 2019Updated 7 years ago
- Collect JSP webshell of various implementation methods. 梳理和发现的JSP Webshell各种姿势☆1,395Jan 18, 2022Updated 4 years ago
- ☆295May 7, 2022Updated 4 years ago
- JNDI服务利用工具 RMI/LDAP，支持部分场景回显、内存shell，高版本JDK场景下利用等，fastjson rce命令执行，log4j rce命令执行 漏洞检测辅助工具☆2,014May 21, 2024Updated 2 years ago
- veinmind-tools 是由长亭科技自研，基于 veinmind-sdk 打造的容器安全工具集☆1,654Jan 10, 2024Updated 2 years ago
- a webshell resides in the memory of java web server☆704Jun 26, 2018Updated 8 years ago