lightspin-tech / lightspin-2022-top-7-attack-pathsLinks
Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.
☆40Updated 3 years ago
Alternatives and similar repositories for lightspin-2022-top-7-attack-paths
Users that are interested in lightspin-2022-top-7-attack-paths are comparing it to the libraries listed below
Sorting:
- Executes commands in a container on a kubelet endpoint that allows anonymous authentication (default)☆114Updated 6 years ago
- Container Excape PoC for CVE-2022-0847 "DirtyPipe"☆78Updated 3 years ago
- POC for CVE-2022-23648☆37Updated 3 years ago
- Simple tool to decrypt Jenkins encrypted strings☆79Updated 2 years ago
- ☆126Updated last year
- Post-exploit a compromised etcd, gain persistence and remote shell to nodes.☆88Updated last year
- Deobfuscate Log4Shell payloads with ease.☆170Updated 3 years ago
- A fingerprint generation helper for nuclei network templates☆78Updated 3 years ago
- Tool to spray AWS Console IAM Logins☆34Updated 3 years ago
- An extension to use Semgrep inside Burp Suite.☆89Updated 6 months ago
- Source Code Management Attack Toolkit☆225Updated 3 years ago
- CloudRec is an open source multi-cloud security posture management (CSPM) platform designed to help organizations improve the security of…☆172Updated 2 weeks ago
- Kubernetes POC for utilizing write mount to /var/log for getting a root on the host☆99Updated 5 years ago
- PoC for CVE-2021-43557☆22Updated 4 years ago
- Detecting Cobalt Strike Team Servers on targets through traffic telemetry.☆22Updated last year
- Tool to pentest spark clusters☆32Updated last year
- This repository contain any information that can be used to hack Kubernetes☆109Updated 3 years ago
- Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.☆59Updated 2 years ago
- We publish our challenge questions for everyone.☆94Updated 4 years ago
- This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapsho…☆122Updated 6 years ago
- This is a Poc for BIGIP iControl unauth RCE☆51Updated 4 years ago
- MacOS C2 Framework☆85Updated 4 years ago
- A CALDERA plugin☆71Updated 3 weeks ago
- Intentionally Vulnerable to Spring4Shell☆52Updated 3 years ago
- Cloud Penetration Testing Toolkit☆106Updated 4 months ago
- A Terraform reproducer for IngressNightmare☆25Updated 8 months ago
- RCE in NPM VSCode Extension☆20Updated 4 years ago
- ☆54Updated 4 years ago
- PoC for CVE-2020-6207 (Missing Authentication Check in SAP Solution Manager)☆81Updated 4 years ago
- WAF bypass PoC☆49Updated 2 years ago