Alternatives and similar repositories for kush

Users that are interested in kush are comparing it to the libraries listed below

• nccgroup / insject
  insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.
  ☆50Updated 3 years ago
• doyensec / oidc-ssrf
  An Evil OIDC Server
  ☆53Updated 2 years ago
• nccgroup / ConMachi
  Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container
  ☆106Updated 6 years ago
• Zeerg / helix-honeypot
  K8s API Honeypot with Active Defense Capabilities
  ☆40Updated last year
• antitree / seccomp-diff
  ☆72Updated 2 weeks ago
• trufflesecurity / WhoAmISlack
  Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.
  ☆41Updated last year
• allisonis / gcp-iam-sentinel-examples
  ☆28Updated 4 years ago
• ncc-erik-steringer / Aerides
  An implementation of infrastructure-as-code scanning using dynamic tooling.
  ☆56Updated 3 years ago
• praetorian-inc / konstellation
  Konstellation is a configuration-driven CLI tool to enumerate cloud resources and store the data into Neo4j.
  ☆21Updated last year
• quarkslab / minik8s-ctf
  A beginner-friendly CTF about Kubernetes security.
  ☆78Updated 2 years ago
• RyanJarv / roles
  Unauthenticated enumeration of AWS IAM Roles.
  ☆25Updated 4 months ago
• tstromberg / ttp-bench
  Adversary emulation for EDR/SIEM testing (macOS/Linux)
  ☆43Updated last year
• ancat / egrets
  egrets monitors egress
  ☆46Updated 5 years ago
• ghostsecurity / waf-btk
  WAF bypass PoC
  ☆47Updated last year
• AnubisSec / GroovyWaiter
  ☆17Updated 3 years ago
• raesene / eathar
  ☆27Updated 3 weeks ago
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆92Updated last year
• antitree / keyctl-unmask
  Going Florida on container keyring masks. A tool to demonstrate the ineffectivity containers have on isolating Linux Kernel keyrings.
  ☆43Updated last year
• abhisek / supply-chain-security-gateway
  Reference architecture and proof of concept implementation for supply chain security gateway
  ☆23Updated 2 years ago
• AbstractClass / CloudPrivs
  Determine privileges from cloud credentials via brute-force testing.
  ☆69Updated 9 months ago
• NodyHub / zipslipper
  Create tar/zip archives that try to exploit zipslip vulnerability.
  ☆47Updated 8 months ago
• blackberry / Falco-bypasses
  Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).
  ☆81Updated last year
• semgr8ns / semgr8s
  Semgrep-based Policy Controller for Kubernetes
  ☆47Updated last month
• hashicorp-forge / semgrep-rules
  HashiCorp-relevant rules for the Semgrep code analysis tool
  ☆41Updated last year
• darryk10 / CVE-2021-25735
  Exploit CVE-2021-25735: Kubernetes Validating Admission Webhook Bypass
  ☆17Updated 4 years ago
• hac01 / gcp-iam-brute
  ☆47Updated 11 months ago
• antitree / cmd_and_kubectl_demos
  ☆27Updated 2 weeks ago
• stephenbradshaw / aws_url_signer
  POC tool to create signed AWS API GET requests to bypass Guard Duty alerting of off-instance credential use via SSRF
  ☆58Updated last year
• ariary / cfuzz
  Command line fuzzer and bruteforcer 🌪 wfuzz for command
  ☆86Updated 2 years ago
• rad-security / fingerprints
  A repository to store Rad Fingerprinting data.
  ☆24Updated 10 months ago