A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities
☆35Nov 12, 2025Updated 11 months ago
Alternatives and similar repositories for GCP-pentest-lab
Users that are interested in GCP-pentest-lab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆29Mar 2, 2023Updated 3 years ago
- nTask is a distributed task management program that allows you to distribute tasks across multiple computers using API communication and …☆17Apr 29, 2026Updated 5 months ago
- your bestfried for finding LinkedIn Employees on github☆15Mar 28, 2023Updated 3 years ago
- PE-Audit its a Powershell script that check for windows privilege escalation vector☆13Aug 3, 2026Updated 2 months ago
- ☆31Oct 23, 2025Updated 11 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- OWASP ASVS Security Evaluation Templates with Nuclei☆44Dec 2, 2025Updated 10 months ago
- Docker image for reconftw, a simple script intended to perform a full recon on an objective with multiple subdomains☆10May 1, 2021Updated 5 years ago
- Seven different DLL injection techniques in one single project.☆12May 19, 2020Updated 6 years ago
- Automated activity logging utility for Mythic C2 v3.0+ with Ghostwriter v3.0+☆26Oct 1, 2026Updated 2 weeks ago
- ☆18Jan 8, 2025Updated last year
- Saves pages to Wayback machine☆13Dec 2, 2024Updated last year
- A Firefox Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon☆28Dec 9, 2024Updated last year
- A collection of one off hacks and simple scripts☆27Mar 21, 2023Updated 3 years ago
- GetSystem-LCI is a PowerShell script to escalate privileges from Administrator to NT AUTHORITY\SYSTEM by abusing LanguageComponentsInstal…☆35Nov 24, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Remove duplicate URLs by retaining only the unique combinations of hostname, path, and parameter names☆38May 5, 2024Updated 2 years ago
- SpecOps is a Burp Suite extension that ingests an OpenAPI or Swagger spec and instantly builds a workbench to test every documented endpo…☆34Aug 31, 2026Updated last month
- Automate the process of an S3 bucket subdomain takeover via dangling CNAME record☆26May 20, 2024Updated 2 years ago
- API and CLI tool to fetch and query Chome DevTools heap snapshots (Python & Playwright)☆16May 16, 2024Updated 2 years ago
- ☆12Dec 21, 2021Updated 4 years ago
- A simple tool that aims to efficiently and quickly parse the outputs of web scraping tools like gau☆12Jun 28, 2021Updated 5 years ago
- Tools and blogs I use to perform GCP red teams☆140Jul 23, 2024Updated 2 years ago
- GCP cloud security CTF☆49Jun 25, 2025Updated last year
- ☆12Oct 2, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Post-exploitation Toolset for Interacting with the Microsoft Graph API☆17Nov 16, 2023Updated 2 years ago
- Standalone Cobalt Strike operation logging Aggressor script for Ghostwriter 2.0+☆39Dec 1, 2025Updated 10 months ago
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Another spinner written in bash. Customizable and pretty☆14Jul 3, 2019Updated 7 years ago
- ☆48Nov 23, 2025Updated 10 months ago
- Library for shellcode injection☆16Mar 21, 2025Updated last year
- Kali in a Box - Containerized and fully operational within your Browser☆13May 15, 2026Updated 5 months ago
- Automated privilege escalation of the world's most popular Docker images.☆72Sep 25, 2023Updated 3 years ago
- An extension to use Semgrep inside Burp Suite.☆90May 23, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- GCPGoat : A Damn Vulnerable GCP Infrastructure☆463Oct 29, 2024Updated last year
- A combined list of helpful awscli commands from Scott Piper's flaws.cloud exercise as well as from Beau Bullock's Breaching the Cloud Tra…☆19Mar 1, 2021Updated 5 years ago
- A different approach to writing BOFs in rust.☆21Aug 20, 2025Updated last year
- Improve automated and semi-automated active scanning in Burp Pro☆66Jun 4, 2025Updated last year
- This repository contains some of the most exhaustive wordlists for enumeration, gathered from a lot of wordlists available on the Interne…☆109Oct 19, 2024Updated last year
- Find your hash in online databases and retrieve its original value☆17Sep 22, 2023Updated 3 years ago
- DelePwn is a security assessment tool designed to identify and demonstrate the risks associated with Google Workspace Domain-Wide Delegat…☆42Aug 8, 2025Updated last year