controlplaneio / truffleproc
truffleproc — hunt secrets in process memory (TruffleHog & gdb mashup)
☆110Updated last year
Related projects ⓘ
Alternatives and complementary repositories for truffleproc
- boostsecurityio/lotp☆101Updated 7 months ago
- ☆110Updated last year
- Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files☆196Updated last month
- Tools to assess DNS security.☆148Updated 8 months ago
- PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams☆98Updated 9 months ago
- Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝☆131Updated last year
- ☆168Updated last month
- Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …☆253Updated last week
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆39Updated 11 months ago
- HASH (HTTP Agnostic Software Honeypot)☆128Updated 6 months ago
- A tool for scanning public or private AMIs for sensitive files and secrets. The tool follows the research made on AWS CloudQuarry where w…☆87Updated last week
- Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container☆102Updated 5 years ago
- Nuclei plugins to audit Chrome extensions☆64Updated 4 months ago
- This tool analyzes a given Gitlab repository and searches for dangling or force-pushed commits containing potential secret or interesting…☆39Updated 3 months ago
- Octoscan is a static vulnerability scanner for GitHub action workflows.☆171Updated last week
- Protect against subdomain takeover☆92Updated 5 months ago
- DEPRECATED, please use the new repository from OWASP: https://github.com/OWASP/raider☆138Updated 3 years ago
- HashiCorp-relevant rules for the Semgrep code analysis tool☆37Updated last year
- ☆115Updated last year
- Cloud agnostic IAM permissions enumerator☆139Updated 2 months ago
- ☆152Updated 2 months ago
- A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation☆100Updated 9 months ago
- ☆58Updated last year
- Automatically detect potential vulnerabilities and analyze repository metrics to prioritize open source security research targets☆181Updated this week
- Ansible/Vagrant/Packer files to create a virtual machine with the tooling needed to perform cloud security assessments☆104Updated 2 months ago
- 🧰 Multi Tool Kubernetes Pentest Image☆215Updated 2 months ago
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆79Updated this week
- POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF☆58Updated last year
- ☆125Updated 4 months ago
- Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).☆80Updated 9 months ago