Google Compute Engine (GCE) VM takeover via DHCP flood - gain root access by getting SSH keys added by google_guest_agent
☆536Jul 30, 2021Updated 5 years ago
Alternatives and similar repositories for gcp-dhcp-takeover-code-exec
Users that are interested in gcp-dhcp-takeover-code-exec are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2020-15368, aka "How to exploit a vulnerable driver"☆515Apr 14, 2022Updated 4 years ago
- ☆703Nov 27, 2024Updated last year
- Reverse proxies cheatsheet☆1,891Nov 4, 2023Updated 3 years ago
- This repo gives an overview of some GCP metadata API attack and defend patterns☆79Mar 23, 2020Updated 6 years ago
- Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env☆102Sep 10, 2019Updated 7 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- This is a PoC exploit for CVE-2020-8559 Kubernetes Vulnerability☆53Jul 23, 2020Updated 6 years ago
- Collections of Orange Tsai's public presentation slides.☆778Oct 26, 2026Updated last week
- Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.☆823Jun 12, 2021Updated 5 years ago
- ☆2,519Jan 2, 2023Updated 3 years ago
- MIDI tunneling through BGP, for times when you want to broadcast your music instead of your IP packets.☆15Oct 28, 2026Updated last week
- ☆170May 20, 2021Updated 5 years ago
- Kubernetes POC for utilizing write mount to /var/log for getting a root on the host☆100Nov 18, 2020Updated 5 years ago
- A container analysis and exploitation tool for pentesters and engineers.☆691Sep 27, 2023Updated 3 years ago
- Catalog Red Team techniques that cause popups in various macOS versions☆16Nov 18, 2024Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Electron Research☆72Feb 9, 2022Updated 4 years ago
- TCP connection hijacker, Rust rewrite of shijack☆548Oct 30, 2024Updated 2 years ago
- How to exploit a double free vulnerability in 2021. Use After Free for Dummies☆1,389Jan 31, 2025Updated last year
- A DNS rebinding attack framework.☆1,325Jul 21, 2026Updated 3 months ago
- NAT Slipstreaming allows an attacker to remotely access any TCP/UDP services bound to a victim machine, bypassing the victim’s NAT/firewa…☆1,986Jan 14, 2023Updated 3 years ago
- [DEPRECATED] A theoretically-infinitely-scalable Skyblock plugin.☆17May 10, 2021Updated 5 years ago
- This repo has been replaced by https://www.cloudvulndb.org☆723Jun 29, 2022Updated 4 years ago
- ☆1,203Sep 2, 2022Updated 4 years ago
- Client-Side Prototype Pollution Tools☆89Sep 21, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆701Jul 4, 2022Updated 4 years ago
- cve-2014-0130 rails directory traversal vuln☆18May 15, 2017Updated 9 years ago
- Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock☆7,158Mar 12, 2024Updated 2 years ago
- This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-…☆4,730Updated this week
- ☆452Oct 3, 2024Updated 2 years ago
- Prototype Pollution and useful Script Gadgets☆1,660Jan 27, 2024Updated 2 years ago
- Proof of concept code for Datadog Security Labs referenced exploits.☆451Sep 14, 2026Updated last month
- An Evil OIDC Server☆53Oct 19, 2022Updated 4 years ago
- WinDbg script to spoof origin and url of a renderer process in Chrome☆25Dec 2, 2020Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Windows Privilege Escalation from User to Domain Admin.☆1,477Dec 18, 2022Updated 3 years ago
- Minecraft Classic server written in Elixir.☆13Apr 4, 2021Updated 5 years ago
- Probe endpoints consuming Java serialized objects to identify classes, libraries, and library versions on remote Java classpaths.☆617Mar 4, 2021Updated 5 years ago
- C# and Impacket implementation of PrintNightmare CVE-2021-1675/CVE-2021-34527☆2,008Jul 20, 2021Updated 5 years ago
- Correlates serviceaccounts and pods to the permissions granted to them via rolebindings and clusterrolesbindings.☆36May 18, 2022Updated 4 years ago
- Simple patcher tool to turn off TLS handshake validation in golang binaries☆11Apr 23, 2022Updated 4 years ago
- kCTF is a Kubernetes-based infrastructure for CTF competitions. For documentation, see☆795Mar 25, 2026Updated 7 months ago