Alternatives and similar repositories for gato

Users that are interested in gato are comparing it to the libraries listed below

• AdnaneKhan / gato-x
  GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.
  ☆388Updated this week
• synacktiv / nord-stream
  Nord Stream is a tool that allows you to extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently …
  ☆298Updated last month
• TupleType / awesome-cicd-attacks
  Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.
  ☆536Updated 6 months ago
• synacktiv / octoscan
  Octoscan is a static vulnerability scanner for GitHub action workflows.
  ☆221Updated 4 months ago
• NetSPI / gcpwn
  Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @Webbi…
  ☆258Updated 3 months ago
• Aqua-Nautilus / CVE-Half-Day-Watcher
  ☆314Updated last month
• RhinoSecurityLabs / GCP-IAM-Privilege-Escalation
  A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.
  ☆398Updated last year
• x1trap / websec-answers
  Websec interview questions by tib3rius answered
  ☆311Updated last year
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆132Updated 4 months ago
• BishopFox / cloudfoxable
  Create your own vulnerable by design AWS penetration testing playground
  ☆390Updated 4 months ago
• boostsecurityio / poutine
  boostsecurityio/poutine
  ☆309Updated last week
• tldrsec / awesome-secure-defaults
  Awesome secure by default libraries to help you eliminate bug classes!
  ☆699Updated 4 months ago
• ghostsecurity / reaper
  💀 Don't fear the Reaper 👻
  ☆585Updated last week
• assetnote / ghostbuster
  Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts.
  ☆278Updated 11 months ago
• CycodeLabs / raven
  CI/CD Security Analyzer
  ☆668Updated 6 months ago
• klarna-incubator / gram
  Gram is Klarna's own threat model diagramming tool
  ☆324Updated last month
• jstawinski / GitHub-Actions-Attack-Diagram
  ☆189Updated 4 months ago
• mazen160 / secrets-patterns-db
  Secrets Patterns DB: The largest open-source Database for detecting secrets, API keys, passwords, tokens, and more.
  ☆1,219Updated 3 weeks ago
• DataDog / KubeHound
  Tool for building Kubernetes attack paths
  ☆900Updated last month
• ine-labs / GCPGoat
  GCPGoat : A Damn Vulnerable GCP Infrastructure
  ☆408Updated 10 months ago
• MattKeeley / Spoofy
  Spoofy is a program that checks if a list of domains can be spoofed based on SPF and DMARC records.
  ☆712Updated last month
• carlospolop / PurplePanda
  Identify privilege escalation paths within and across different clouds
  ☆699Updated 2 months ago
• happycakefriends / certainly
  Certainly is a offensive security toolkit to capture large amounts of traffic in various network protocols in bitflip and typosquat scena…
  ☆196Updated 11 months ago
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆156Updated last year
• owasp-noir / noir
  Attack surface detector that identifies endpoints by static analysis
  ☆730Updated last week
• firefart / hijagger
  Checks all maintainers of all NPM and Pypi packages for hijackable packages through domain re-registration
  ☆299Updated this week
• Checkmarx / capital
  A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Sec…
  ☆300Updated 2 weeks ago
• WeAreCloudar / s3-account-search
  S3 Account Search
  ☆15Updated last month
• boringtools / git-alerts
  Tool to detect and monitor GitHub org users' public repositories for secrets and sensitive files
  ☆222Updated 2 months ago
• BishopFox / iam-vulnerable
  Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.
  ☆515Updated last year