Alternatives and similar repositories for kind-of-insecure:

Users that are interested in kind-of-insecure are comparing it to the libraries listed below

• raesene / TestingScripts
  A More or less Random Collection of Scripts for security Testing.
  ☆65Updated 2 years ago
• TestingPens / Constole
  Scan for and exploit Consul agents
  ☆40Updated 5 years ago
• pbnj / s3-fuzzer
  🔐 A concurrent, command-line AWS S3 Fuzzer. Written in Go.
  ☆45Updated 7 years ago
• VirtueSecurity / aws-extender-cli
  AWS Extender CLI is a command-line script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common mi…
  ☆82Updated 4 years ago
• singe / container-breakouts
  Testing/collecting some container breakouts
  ☆93Updated 5 years ago
• ProfessionallyEvil / harpoon
  A collection of scripts, and tips and tricks for hacking k8s clusters and containers.
  ☆134Updated 4 months ago
• bgeesaman / subpath-exploit
  Writeup of CVE-2017-1002101 with sample "exploit"/escape
  ☆35Updated 6 years ago
• nccgroup / ConMachi
  Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container
  ☆106Updated 6 years ago
• antitree / cmd_and_kubectl_demos
  ☆27Updated 4 months ago
• cji / talks
  Conference talk slides and code
  ☆11Updated 4 years ago
• nccgroup / go-pillage-registries
  Pentester-focused Docker registry tool to enumerate and pull images
  ☆105Updated 5 years ago
• devsecops / defcon-workshop
  ☆66Updated 7 years ago
• OWASP / Cloud-Native-Application-Security-Top-10
  ☆20Updated 6 years ago
• ropnop / pentest_charts
  Some helpful Helm Charts for pentesters
  ☆39Updated 6 years ago
• anshumanbh / FASTSAM
  Framework for Automated Security Testing that is Scaleable and Asynchronous built on Microservices
  ☆18Updated 8 years ago
• pentestgeek / burpcommander
  Ruby command-line interface to Burp Suite's REST API
  ☆59Updated 4 years ago
• NodyHub / k8s-ctf-rocks
  Kubernetes Easter CTF
  ☆58Updated 4 years ago
• snyff / oauthsecurity
  OAuth Security Cheatsheet
  ☆39Updated 10 years ago
• nccgroup / SSHession
  The SSH Multiplex Backdoor Tool
  ☆63Updated 5 years ago
• HanseSecure / ExploitDev
  ☆122Updated 7 years ago
• Soluto / containers-security-project
  A place for documenting threats and mitigations related to containers orchestrators (Kubernetes, Swarm etc)
  ☆25Updated 6 years ago
• nccgroup / s3_objects_check
  Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.
  ☆76Updated 3 years ago
• torque59 / AWS-Vulnerable-Lambda
  An AWS Lambda vulnerable application written in flask.
  ☆48Updated 7 years ago
• dxa4481 / AttackingAndDefendingTheGCPMetadataAPI
  This repo gives an overview of some GCP metadata API attack and defend patterns
  ☆76Updated 4 years ago
• PortSwigger / attack-surface-detector
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆14Updated 3 years ago
• zuBux / badbucket
  badbucket checks your s3 bucket for common misconfigurations
  ☆23Updated 7 years ago
• pownjs / git
  Assorted tools for security-related task for git repositories
  ☆59Updated 2 years ago
• 0xbharath / slurp-old
  A tool to enumerate S3 buckets manually or via certstream
  ☆82Updated last year
• Parasimpaticki / sandcastle
  🏰 A Python script for AWS S3 bucket enumeration.
  ☆54Updated 4 years ago
• alexivkin / kubepwn
  Kubernetes Pwnage for all
  ☆56Updated 4 years ago