lightspin-tech / lightspin-2022-top-7-attack-paths
Based on Lightspin proprietary data, research, and our tracking of cloud security trends in the market, our research team has compiled a list of the 2022 Top 7 Cloud Attack Paths across AWS, Azure, GCP, and Kubernetes as seen on the Lightspin Cloud Native Application Protection Platform.
☆39Updated 2 years ago
Alternatives and similar repositories for lightspin-2022-top-7-attack-paths:
Users that are interested in lightspin-2022-top-7-attack-paths are comparing it to the libraries listed below
- Executes commands in a container on a kubelet endpoint that allows anonymous authentication (default)☆112Updated 6 years ago
- Post-exploit a compromised etcd, gain persistence and remote shell to nodes.☆74Updated 10 months ago
- POC for CVE-2022-23648☆36Updated 3 years ago
- Tool to spray AWS Console IAM Logins☆29Updated 2 years ago
- Mimicry is a dynamic deception tool that actively deceives an attacker during exploitation and post-exploitation.☆54Updated last year
- A fingerprint generation helper for nuclei network templates☆72Updated 2 years ago
- try to determine if a host is vulnerable to SpringShell CVE‐2022‐22965 and CVE‐2022‐22963☆23Updated 2 years ago
- Container Excape PoC for CVE-2022-0847 "DirtyPipe"☆78Updated 2 years ago
- Konstellation is a configuration-driven CLI tool to enumerate cloud resources and store the data into Neo4j.☆21Updated last year
- ☆42Updated 2 years ago
- Jekyll Files for cloudsecwiki.com☆50Updated 3 years ago
- Red Team Tools for Emulated Adversary Techniques with MITRE ATT&CK☆30Updated 4 years ago
- WAF bypass PoC☆46Updated last year
- This tool implements a cloud version of the Shadow Copy attack against domain controllers running in AWS using only the EC2:CreateSnapsho…☆119Updated 5 years ago
- ☆124Updated 8 months ago
- log4j 1.x RCE Poc -- CVE-2021-4104☆20Updated 3 years ago
- ☆32Updated 2 years ago
- Some private tools i decided to release for public.☆49Updated last year
- ☆54Updated 3 years ago
- Proof of Concept Exploit for ManageEngine ServiceDesk Plus CVE-2021-44077☆33Updated 3 years ago
- Cloud Penetration Testing Toolkit☆99Updated last month
- MacOS C2 Framework☆83Updated 3 years ago
- Apache Flink 目录遍历漏洞批量检测 (CVE-2020-17519)☆48Updated 4 years ago
- This is a Poc for BIGIP iControl unauth RCE☆50Updated 4 years ago
- Detecting Cobalt Strike Team Servers on targets through traffic telemetry.☆21Updated 7 months ago
- Reference architecture and proof of concept implementation for supply chain security gateway☆23Updated last year
- Simple tool to decrypt Jenkins encrypted strings☆75Updated last year
- RCE in NPM VSCode Extension☆20Updated 3 years ago
- ☆70Updated 4 years ago
- Determine privileges from cloud credentials via brute-force testing.☆67Updated 7 months ago