doyensec / oidc-ssrf

Related projects ⓘ

Alternatives and complementary repositories for oidc-ssrf

• nccgroup / cowcloud
  ☆58Updated last year
• NodyHub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆45Updated last month
• synacktiv / DepFuzzer
  ☆39Updated last month
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆39Updated 10 months ago
• AdnaneKhan / ActionsCacheBlasting
  Proof-of-concept code for research into GitHub Actions Cache poisoning.
  ☆21Updated 2 months ago
• AnubisSec / GroovyWaiter
  ☆17Updated 2 years ago
• AbstractClass / CloudPrivs
  Determine privileges from cloud credentials via brute-force testing.
  ☆64Updated 2 months ago
• sensepost / steampipe-plugin-projectdiscovery
  A steampipe plugin to query projectdiscovery.io tools.
  ☆26Updated 3 months ago
• alt3kx / wafparan01d3
  Quick WAF "paranoid" Doctor Evaluation | WAFPARAN01D3 Tool
  ☆25Updated 2 years ago
• simondotsh / nsec2023-ctf-aws
  ☆13Updated last year
• ProZachJ / ducktales
  Python's handling of NaN is....interesting?broken?...this project illustrates the issue
  ☆13Updated 2 years ago
• hac01 / gcp-iam-brute
  ☆40Updated 4 months ago
• dillonfranke / protoburp
  Encode and Fuzz Custom Protobuf Messages in Burp Suite
  ☆30Updated last year
• leesoh / np
  A tool to parse, deduplicate, and query multiple port scans.
  ☆57Updated last year
• airman604 / cms2cmd
  ☆10Updated 5 years ago
• zer1t0 / awsenum
  Enumerate AWS permissions and resources.
  ☆62Updated 2 years ago
• sahadnk72 / jecretz
  Jira Secret Hunter - Helps you find credentials and sensitive contents in Jira tickets
  ☆42Updated last year
• doyensec / cloudsec-tidbits
  Blogpost series showcasing interesting cloud - web app security bugs
  ☆45Updated last year
• carlospolop / bf-aws-perms-simulate
  ☆15Updated 9 months ago
• abhisek / supply-chain-security-gateway
  Reference architecture and proof of concept implementation for supply chain security gateway
  ☆23Updated last year
• stephenbradshaw / aws_url_signer
  POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
  ☆58Updated last year
• Outpost24 / outpost24-cors-check
  Additional active scan checks for BURP
  ☆20Updated last month
• SonarSource / argument-injection-vectors
  A curated list of argument injection vectors
  ☆37Updated 2 months ago
• SygniaLabs / Qemuno
  Qemuno Framework
  ☆23Updated 2 years ago
• OWASP / wwwgrep
  OWASP Foundation Web Respository
  ☆35Updated 3 years ago
• lacioffi / GCP-pentest-lab
  A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities
  ☆25Updated 3 months ago
• wdahlenburg / canary
  CLI tool written in Go to generate Canary Tokens from https://canarytokens.org
  ☆11Updated 2 years ago
• synacktiv / gh-hijack-runner
  A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.
  ☆18Updated 3 weeks ago
• CompassSecurity / burp-copy-request-response
  Burp extension for quickly copying request/response data.
  ☆26Updated last month