A vulnerable environment for exploring common GCP misconfigurations and vulnerabilities
☆35Nov 12, 2025Updated 11 months ago
Alternatives and similar repositories for GCP-pentest-lab
Users that are interested in GCP-pentest-lab are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆29Mar 2, 2023Updated 3 years ago
- nTask is a distributed task management program that allows you to distribute tasks across multiple computers using API communication and …☆17Apr 29, 2026Updated 6 months ago
- ☆33Oct 23, 2025Updated last year
- Docker image for reconftw, a simple script intended to perform a full recon on an objective with multiple subdomains☆10May 1, 2021Updated 5 years ago
- Automated activity logging utility for Mythic C2 v3.0+ with Ghostwriter v3.0+☆26Oct 20, 2026Updated 2 weeks ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Saves pages to Wayback machine☆11Dec 2, 2024Updated last year
- Seven different DLL injection techniques in one single project.☆12May 19, 2020Updated 6 years ago
- A Firefox Extension to track postMessage usage (url, domain and stack) both by logging using CORS and also visually as an extension-icon☆28Dec 9, 2024Updated last year
- Automate the process of an S3 bucket subdomain takeover via dangling CNAME record☆24May 20, 2024Updated 2 years ago
- A collection of one off hacks and simple scripts☆26Mar 21, 2023Updated 3 years ago
- Essa repositório armazena uma versão em markdown do OWASP WSTG para ser utilizada como uma referência rápida durante testes de invasão em…☆17Aug 11, 2023Updated 3 years ago
- GetSystem-LCI is a PowerShell script to escalate privileges from Administrator to NT AUTHORITY\SYSTEM by abusing LanguageComponentsInstal…☆35Nov 24, 2024Updated last year
- Remove duplicate URLs by retaining only the unique combinations of hostname, path, and parameter names☆39May 5, 2024Updated 2 years ago
- url-fuzzer☆22Feb 26, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- SpecOps is a Burp Suite extension that ingests an OpenAPI or Swagger spec and instantly builds a workbench to test every documented endpo…☆34Aug 31, 2026Updated 2 months ago
- GCPGoat : A Damn Vulnerable GCP Infrastructure☆466Oct 29, 2024Updated 2 years ago
- Red AI Archive: Jeff Sims - A curated collection of work in AI safety, cybersecurity data science, and AI red teaming – my own research a…☆28Apr 1, 2025Updated last year
- A simple tool that aims to efficiently and quickly parse the outputs of web scraping tools like gau☆12Jun 28, 2021Updated 5 years ago
- The largest collection of wordlists in yaml for bug bounty tools☆39Apr 7, 2024Updated 2 years ago
- API and CLI tool to fetch and query Chome DevTools heap snapshots (Python & Playwright)☆16May 16, 2024Updated 2 years ago
- ☆12Oct 2, 2022Updated 4 years ago
- Search for secrets inside user data attached to EC2 instances on multiple AWS accounts☆16Jun 19, 2024Updated 2 years ago
- ☆12Dec 21, 2021Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Another spinner written in bash. Customizable and pretty☆14Jul 3, 2019Updated 7 years ago
- Arbitrary file read in Claude Code☆15Jul 19, 2026Updated 3 months ago
- Something and everything related to Bug Bounties☆14Sep 8, 2026Updated last month
- An extension to use Semgrep inside Burp Suite.☆90May 23, 2025Updated last year
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Corscan is a Go-based tool that automates the detection and exploitation of CORS misconfigurations. It performs intelligent analysis of A…☆11Jul 16, 2025Updated last year
- Kali in a Box - Containerized and fully operational within your Browser☆13May 15, 2026Updated 5 months ago
- A combined list of helpful awscli commands from Scott Piper's flaws.cloud exercise as well as from Beau Bullock's Breaching the Cloud Tra…☆19Mar 1, 2021Updated 5 years ago
- OS-level sandbox for AI coding agents - kernel-enforced file, command, and network isolation☆13Aug 4, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- 🗺 Convert nmap XML output to beautiful JSON☆17Mar 17, 2023Updated 3 years ago
- GCP cloud security CTF☆56Jun 25, 2025Updated last year
- Automatically deploy Nemesis☆20Jun 14, 2024Updated 2 years ago
- Nmapurls parses Nmap xml reports from either piped input or command line arg and outputs a list of http(s) URL's to be used in an automat…☆46Jun 15, 2025Updated last year
- This is a repository for Penetration Test, Purple Team Exercise and Red Team☆17Dec 13, 2023Updated 2 years ago
- A different approach to writing BOFs in rust.☆21Aug 20, 2025Updated last year
- aws cli pentesting/red team snippets☆32Jan 12, 2024Updated 2 years ago