krol3 / demo-filelessLinks
☆12Updated last year
Alternatives and similar repositories for demo-fileless
Users that are interested in demo-fileless are comparing it to the libraries listed below
Sorting:
- ☆31Updated 2 years ago
- A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities☆31Updated last month
- Blogpost series showcasing interesting cloud - web app security bugs☆50Updated 2 years ago
- Scan your account for the use of untrusted AMIs☆30Updated last month
- ☆183Updated 8 months ago
- ☆12Updated 4 years ago
- ☆60Updated 2 years ago
- ☆50Updated last year
- GCP GOAT is the vulnerable application for learn the GCP Security☆70Updated 7 months ago
- Simple Command Line Tool to Enumerate Slack Workspace Names from Slack Webhook URLs.☆42Updated 2 years ago
- ☆55Updated 2 years ago
- This GitHub Action sends a reverse shell from a runner via Azure Storage Account blobs☆37Updated last year
- WAF bypass PoC☆50Updated 2 years ago
- Vulnerable by Design AWS Cloud Development Kit (CDK) Infrastructure☆48Updated 2 years ago
- 🌐 Visualize and explore IaC ✒️ Create and share notes in VS Code 🤝 Sync notes and findings in real-time with friends☆73Updated last year
- ☆16Updated last year
- AWS SSO serverless phishing API.☆32Updated 4 years ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆74Updated 3 years ago
- AWS Trail Recon is an idea that came up during gohacking's offensive AWS security training. The idea is to use cloudtrail:lookupevents to…☆15Updated last year
- A simple script which implements different Cognito attacks such as Account Oracle or Priviledge Escalation☆110Updated last year
- Proof of Concepts for malicious maintainers: How to Tamper with Releases built with GitHub Actions Worfklows, presented at fwd:cloudsec E…☆77Updated 3 months ago
- Determine privileges from cloud credentials via brute-force testing.☆67Updated last year
- Create tar/zip archives that try to exploit zipslip vulnerability.☆48Updated last year
- HazProne is a Cloud Pentesting Framework that emulates close to Real-World Scenarios by deploying Vulnerable-By-Demand AWS resources enab…☆40Updated 3 years ago
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago
- ☆142Updated last week
- Proof-of-concept code for research into GitHub Actions Cache poisoning.☆21Updated 10 months ago
- Kubernetes Pwnage for all☆56Updated 5 years ago
- ☆104Updated last month
- ☆94Updated 3 years ago