GCP cloud security CTF
☆49Jun 25, 2025Updated last year
Alternatives and similar repositories for thunder-ctf
Users that are interested in thunder-ctf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Welcome to the Very Vulnerable Lambda Application repository! This repository contains an intentionally vulnerable serverless applicatio…☆13Oct 8, 2026Updated last week
- Enumerate Microsoft service access from a refresh token☆26Sep 28, 2026Updated 2 weeks ago
- The alternative solution for AWS Organizations SCP feature which is not available in AWS China yet.☆14Oct 10, 2023Updated 3 years ago
- ☆19Jul 9, 2022Updated 4 years ago
- 2018 Advent Calendar browser pwnables☆14Feb 14, 2019Updated 7 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities☆35Nov 12, 2025Updated 11 months ago
- Goauld is a post-exploitation and remote access tool designed for restricted environments.☆20Sep 13, 2026Updated last month
- A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.☆574May 26, 2023Updated 3 years ago
- Varna: Quick & Cheap AWS CloudTrail Monitoring with Event Query Language (EQL)☆52Dec 26, 2022Updated 3 years ago
- Staged Payloads from Kali Linux - Part 1,2 of 3☆20Oct 6, 2022Updated 4 years ago
- Process dumper wrote in rust.☆14Sep 16, 2024Updated 2 years ago
- ☆40Jun 9, 2021Updated 5 years ago
- Tutorial covering how to discover DLLs for Hijacking and how to create proxy DLLS using Microsoft Teams as an example☆15Apr 7, 2021Updated 5 years ago
- A semi fast tool to bruteforce values of LDAP injections over HTTP.☆14Dec 4, 2013Updated 12 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- SACL Scanner is a tool designed to scan and analyze SACLs.☆53Feb 13, 2025Updated last year
- wtftp.py is a tool to attack Microsoft Deployment Toolkit (MDT) and Windows Deployment Services (WDS).☆44Jan 22, 2026Updated 8 months ago
- JMSDigger is JMS API basedEnterprise Messaging Application assessment tool☆30Aug 6, 2014Updated 12 years ago
- WebClientRelayUp - an universal no-fix local privilege escalation in domain-joined windows workstations in default configuration.☆87Apr 28, 2026Updated 5 months ago
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- Talk slides and material☆38Mar 24, 2024Updated 2 years ago
- ☆13Mar 31, 2023Updated 3 years ago
- A small go tool to upload JSON files to the BloodHound community edition API☆32May 29, 2024Updated 2 years ago
- Tools and blogs I use to perform GCP red teams☆140Jul 23, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆22Aug 3, 2024Updated 2 years ago
- Python script which takes internal asset inventory at scale using zmap. Outputs to CSV.☆23Apr 1, 2026Updated 6 months ago
- Tool for reconnaissance of AWS cloud environments☆16Oct 9, 2023Updated 3 years ago
- CdkGoat is Bridgecrew's "Vulnerable by Design" AWS CDK repository. CdkGoat is a learning and training project that demonstrates how commo…☆48May 9, 2023Updated 3 years ago
- ☆14Feb 23, 2021Updated 5 years ago
- Pass-the-Passkey Family of Attacks☆233Sep 14, 2026Updated last month
- ☆157Oct 9, 2026Updated last week
- ☆10Jul 19, 2020Updated 6 years ago
- NAPALM driver for Alcatel Lucent Enterprise AOS☆12Apr 27, 2021Updated 5 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆13Apr 2, 2022Updated 4 years ago
- Threadless Injection Payload Toolkit☆12Oct 12, 2023Updated 3 years ago
- Fuzz 403/401ing endpoints for bypasses☆13Aug 14, 2020Updated 6 years ago
- Darkbit Cloud Security Tools☆25Nov 12, 2020Updated 5 years ago
- Snaffler in Python☆121Oct 1, 2026Updated 2 weeks ago
- Use the GCP testIamPermissions functionality to bruteforce and discover your permissions☆46Jun 22, 2025Updated last year
- This example demonstrates a pattern to leverage multiple identity providers with an API Gateway and manage Authorization with Amazon Veri…☆18Jan 22, 2024Updated 2 years ago