g3rzi / HackingKubernetesLinks
This repository contain any information that can be used to hack Kubernetes
☆106Updated 3 years ago
Alternatives and similar repositories for HackingKubernetes
Users that are interested in HackingKubernetes are comparing it to the libraries listed below
Sorting:
- Source Code Management Attack Toolkit☆219Updated 2 years ago
- Dockerized POC for CVE-2022-42889 Text4Shell☆76Updated 2 years ago
- Cloud agnostic IAM permissions enumerator☆150Updated 3 months ago
- Executes commands in a container on a kubelet endpoint that allows anonymous authentication (default)☆113Updated 6 years ago
- A robust Red Team proxy written in Go.☆159Updated 3 years ago
- Simple tool to decrypt Jenkins encrypted strings☆76Updated 2 years ago
- A cli for cracking, testing vulnerabilities on Json Web Token(JWT)☆134Updated last month
- A fingerprint generation helper for nuclei network templates☆75Updated 2 years ago
- Container Excape PoC for CVE-2022-0847 "DirtyPipe"☆78Updated 3 years ago
- F5 BIG-IP RCE exploitation (CVE-2022-1388)☆88Updated 3 years ago
- ☆127Updated last year
- Proof of Concept for the Apache commons-text vulnerability CVE-2022-42889.☆34Updated 2 years ago
- Apache Spark Shell Command Injection Vulnerability☆88Updated 2 years ago
- Nuclei templates for K8S security scanning☆101Updated 3 years ago
- Kubernetes pentesting, hardening and hunting tools.☆68Updated 2 years ago
- CVE-2021-40346 PoC (HAProxy HTTP Smuggling)☆41Updated 3 years ago
- This is a dockerized application that is vulnerable to the Spring4Shell vulnerability (CVE-2022-22965).☆107Updated 2 years ago
- Workshop on Template Injection (6 exercises) covering Twig, Jinja2, Tornado, Velocity and Freemaker engines.☆127Updated 2 years ago
- Kubernetes POC for utilizing write mount to /var/log for getting a root on the host☆97Updated 4 years ago
- Spring Framework RCE (CVE-2022-22965) Nmap (NSE) Checker (Non-Intrusive)☆102Updated 3 years ago
- PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)☆81Updated 4 years ago
- Deobfuscate Log4Shell payloads with ease.☆163Updated 2 years ago
- Static code analysis tool based on Elasticsearch☆129Updated 4 years ago
- Repository of CVE found by OCD people☆77Updated 3 weeks ago
- Recurrent Neural Network SubDomain Discovery Tool☆95Updated 2 years ago
- Shell Simulation over Net-SNMP with extend functionality☆96Updated 4 years ago
- Simple extension that allows to run nuclei scanner directly from burp and transforms json results into the issues.☆30Updated 2 years ago
- The purpose of this project is to demonstrate the Log4Shell exploit with Log4J vulnerabilities using PDF as delivery channel☆157Updated 3 years ago
- Command line tool for dumping Jenkins credentials.☆178Updated 10 months ago
- RmiTaste allows security professionals to detect, enumerate, interact and exploit RMI services by calling remote methods with gadgets fro…☆107Updated 4 years ago