Lab exercises to practice privilege escalation scenarios in AWS IAM. These exercises and the slides go through the basics behind AWS IAM, common weaknesses in AWS deployments, specific to IAM, and how to exploit them manually. This was run as a workshop at BruCon 2019.
☆16Oct 31, 2019Updated 7 years ago
Alternatives and similar repositories for privilege_escalation
Users that are interested in privilege_escalation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- View screenshots as a slideshow over http☆15Mar 13, 2020Updated 6 years ago
- Lab that will help you to understand how type juggling vulnerability works.☆22Sep 23, 2020Updated 6 years ago
- Proof-of-concept CORS exploitation tool.☆35Sep 7, 2019Updated 7 years ago
- ☆15Aug 5, 2026Updated 2 months ago
- Template Obsidian.md Vault☆13Feb 29, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A tool to scan for .DS_Store files on webservers☆35Mar 28, 2021Updated 5 years ago
- The project was upgraded from https://coder.pub/ and supported VS2017. The original author wrote the detailed design ideas documentation…☆20Sep 18, 2017Updated 9 years ago
- A Burpsuite extension written in Python to perform basic validation fuzzing☆11Oct 7, 2022Updated 4 years ago
- The Recon scanning tool scans websites for open files & directories specified in the custom config file. Default server configuration fil…☆15Apr 4, 2018Updated 8 years ago
- ☆12May 14, 2023Updated 3 years ago
- Boxer: A fast directory bruteforce tool written in Python with concurrency.☆14Feb 26, 2021Updated 5 years ago
- Expired FUD .exe crypter☆12Aug 21, 2016Updated 10 years ago
- Exploits developped by Outflank B.V. team members☆21Jan 26, 2017Updated 9 years ago
- Simple webinterface combining different recon tools.☆12Mar 2, 2018Updated 8 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- ☆10Oct 30, 2019Updated 7 years ago
- Subdomains-enumeration, subdomain-takeover monitoring api and S3 bucket scanner.☆38Nov 21, 2025Updated 11 months ago
- ☆13Jul 29, 2025Updated last year
- A repo which contains lots of things which it shouldn't☆44Sep 23, 2026Updated last month
- A Powershell script for frequency analysis of separated values data files.☆17Jan 22, 2014Updated 12 years ago
- Automatic Vulnerability Discovery☆39Mar 30, 2019Updated 7 years ago
- parsers to make life easier☆13Aug 21, 2020Updated 6 years ago
- Ansible module for OWASP ZAP using Python API to scan web targets for security issues☆15Dec 3, 2017Updated 8 years ago
- This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP…☆50Feb 27, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- URL-encode data streams via commandline☆14Oct 26, 2019Updated 7 years ago
- Dominate the Active Directory game. An Active Directory environments pentest tool complementary to existing ones like NetExec.☆20Oct 26, 2026Updated last week
- ☆14Nov 29, 2019Updated 6 years ago
- Scan secrets from Continuous Integration Build Logs☆53Oct 14, 2019Updated 7 years ago
- $ curl -sL sub.sh | bash☆17Aug 7, 2023Updated 3 years ago
- An interactive planet and star size comparison https://mr21.github.io/space-object-comparison☆17Aug 5, 2018Updated 8 years ago
- This repository is created for personal use and added tools from my blog post.☆14May 7, 2026Updated 5 months ago
- The wordlists that have been compiled using disclosed reports at HackerOne bug bounty platform☆10Jun 28, 2020Updated 6 years ago
- An AWS Pentesting tool that lets you use one-liner commands to backdoor an AWS account's resources with a rogue AWS account - or share th…☆17Feb 16, 2021Updated 5 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Python script to give you subsets of the nmap "top-ports". For example, I want the 10th to 100th most common TCP ports. Spits out a comma…☆18Mar 8, 2020Updated 6 years ago
- A WASM CTF Challenge☆19May 30, 2019Updated 7 years ago
- Osquery Packs we use for customer security hardening☆12Jun 30, 2025Updated last year
- Assists in mass exportation of Nessus scans☆19Apr 20, 2018Updated 8 years ago
- web app for conducting lightcurve photometry☆17Apr 4, 2026Updated 6 months ago
- A tool to abuse Exchange services☆12Mar 18, 2024Updated 2 years ago
- A PowerShell script to prevent Sysmon from writing its events☆16Apr 23, 2020Updated 6 years ago