Kubernetes security notes and best practices
☆732Apr 15, 2022Updated 4 years ago
Alternatives and similar repositories for k8s-security
Users that are interested in k8s-security are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.☆300Aug 30, 2021Updated 5 years ago
- 一个全新的敏感文件发现工具☆225Jan 10, 2021Updated 5 years ago
- attackRmi☆259Oct 14, 2020Updated 6 years ago
- Multi-language web CGI interfaces exploits.☆393Aug 22, 2022Updated 4 years ago
- Hunt for security weaknesses in Kubernetes clusters☆5,086Mar 19, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- tomcat使用了自带session同步功能时,不安全的配置(没有使用EncryptInterceptor)导致存在的反序列化漏洞,通过精心构造的数据包, 可以对使用了tomcat自带session同步功能的服务器进行攻击。PS:这个不是CVE-2020-9484,9484…☆214May 19, 2020Updated 6 years ago
- (周瑜)Java - SpringBoot 持久化 WebShell(不仅仅是SpringBoot,适合任何符合JavaEE规范的服务)☆615Dec 29, 2021Updated 4 years ago
- X安蜜罐用的一些存在JSonp劫持的API☆92May 28, 2021Updated 5 years ago
- ☆146Jun 20, 2018Updated 8 years ago
- Kubernetes Security - Best Practice Guide☆2,707Sep 11, 2019Updated 7 years ago
- Apache Solr Injection Research☆580Jan 28, 2020Updated 6 years ago
- JumpServer远程代码执行漏洞检测利用脚本☆202Feb 9, 2021Updated 5 years ago
- ☆78Jan 12, 2021Updated 5 years ago
- A tool to scan Kubernetes cluster for risky permissions☆1,434May 25, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆131Jun 17, 2022Updated 4 years ago
- 适用于weblogic和Tomcat的无文件的内存马(memshell)☆271Mar 4, 2022Updated 4 years ago
- some struts tag , attributes which out of the range will call SetDynamicAttribute() function, it will cause ONGL expression execute☆70Dec 14, 2020Updated 5 years ago
- 基于亚马逊S3\阿里云OSS\腾讯COS通信隧道的远程管理工具☆328Oct 10, 2020Updated 6 years ago
- 一个利用ASM对字节码进行污点传播分析的静态代码审计应用(添加了大量代码注释,适合大家进行源码学习)。也加入了挖掘Fastjson反序列化gadget chains和SQLInject(JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等)静…☆454Mar 24, 2022Updated 4 years ago
- Java Agent is a Java application probe of DongTai IAST, which collects method invocation data during runtime of Java application by dynam…☆699Dec 25, 2023Updated 2 years ago
- proxylogon exploit - CVE-2021-26857☆111Mar 11, 2021Updated 5 years ago
- 内存马Demo合集 memshell demo for java / php / python☆423May 31, 2021Updated 5 years ago
- CVE-2020-1066-EXP支持Windows 7和Windows Server 2008 R2操作系统☆186Jun 17, 2020Updated 6 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 用于辅助安全工程师漏洞挖掘、测试、复现,集合了mock、httplog、dns tools、xss,可用于测试各类无回显、无法直观判断或特定场景下的漏洞。☆867Jul 21, 2019Updated 7 years ago
- ☆154Jun 24, 2019Updated 7 years ago
- BCS(北京网络安全大会)2019 红队行动会议重点内容☆818Sep 4, 2019Updated 7 years ago
- A system that may trick hackers. 针对黑客的拟态欺骗系统。☆454Nov 20, 2025Updated 11 months ago
- 伪造Myslq服务端,并利用Mysql逻辑漏洞来获取客户端的任意文件反击攻击者☆361Apr 24, 2022Updated 4 years ago
- ☆843Jun 7, 2022Updated 4 years ago
- Flask 内存马☆314Mar 26, 2021Updated 5 years ago
- 用于记录分享一些有趣的案例☆867Jan 10, 2022Updated 4 years ago
- Some payloads of JNDI Injection in JDK 1.8.0_191+☆486Dec 9, 2020Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- a simple tool to detect potential security threat in php code☆317Sep 9, 2024Updated 2 years ago
- weaponized tool for CVE-2020-17144☆158Dec 9, 2020Updated 5 years ago
- anti AV☆291Mar 12, 2020Updated 6 years ago
- 在渗透测试中快速检测常见中间件、组件的高危漏洞。☆725Mar 21, 2022Updated 4 years ago
- Java RCE 回显测试代码☆1,008Oct 15, 2020Updated 6 years ago
- MySQL JDBC Deserialization Payload / MySQL客户端jdbc反序列化漏洞payload☆13Feb 8, 2020Updated 6 years ago
- 通过 Redis 主从写出无损文件☆717May 25, 2020Updated 6 years ago