Alternatives and similar repositories for kind-of-insecure:

Users that are interested in kind-of-insecure are comparing it to the libraries listed below

• alexivkin / kubepwn
  Kubernetes Pwnage for all
  ☆56Updated 4 years ago
• bgeesaman / subpath-exploit
  Writeup of CVE-2017-1002101 with sample "exploit"/escape
  ☆35Updated 6 years ago
• antitree / cmd_and_kubectl_demos
  ☆27Updated 2 months ago
• raesene / TestingScripts
  A More or less Random Collection of Scripts for security Testing.
  ☆64Updated 2 years ago
• TestingPens / Constole
  Scan for and exploit Consul agents
  ☆40Updated 5 years ago
• nccgroup / go-pillage-registries
  Pentester-focused Docker registry tool to enumerate and pull images
  ☆105Updated 5 years ago
• nccgroup / SSHession
  The SSH Multiplex Backdoor Tool
  ☆63Updated 5 years ago
• ropnop / pentest_charts
  Some helpful Helm Charts for pentesters
  ☆39Updated 6 years ago
• dxa4481 / AttackingAndDefendingTheGCPMetadataAPI
  This repo gives an overview of some GCP metadata API attack and defend patterns
  ☆76Updated 4 years ago
• serain / kubelet-anon-rce
  Executes commands in a container on a kubelet endpoint that allows anonymous authentication (default)
  ☆112Updated 6 years ago
• NotSoSecure / cloud-sec-wiki
  Jekyll Files for cloudsecwiki.com
  ☆50Updated 3 years ago
• Matir / webborer
  WebBorer is a directory-enumeration tool written in Go.
  ☆44Updated last year
• pbnj / s3-fuzzer
  🔐 A concurrent, command-line AWS S3 Fuzzer. Written in Go.
  ☆44Updated 7 years ago
• torque59 / AWS-Vulnerable-Lambda
  An AWS Lambda vulnerable application written in flask.
  ☆48Updated 7 years ago
• nccgroup / ConMachi
  Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container
  ☆106Updated 6 years ago
• tabbysable / POC-2020-8559
  Proof of Concept exploit for Kubernetes CVE-2020-8559
  ☆20Updated 4 years ago
• PortSwigger / attack-surface-detector
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆14Updated 2 years ago
• DolosGroup / Jenkins-Pillage
  A tool for automatically gathering sensitive information from exposed Jenkins servers
  ☆103Updated 2 years ago
• Soluto / containers-security-project
  A place for documenting threats and mitigations related to containers orchestrators (Kubernetes, Swarm etc)
  ☆25Updated 6 years ago
• maus- / slack-auditor
  Provides an easy way to collect and send Slack access & integration logs.
  ☆13Updated 3 years ago
• snyff / oauthsecurity
  OAuth Security Cheatsheet
  ☆39Updated 10 years ago
• we45 / Serverless-Workshop
  Serverless Workshop
  ☆16Updated 2 years ago
• nccgroup / s3_objects_check
  Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.
  ☆75Updated 2 years ago
• NodyHub / k8s-ctf-rocks
  Kubernetes Easter CTF
  ☆58Updated 4 years ago
• appsecco / defcon-26-workshop-attacking-and-auditing-docker-containers
  DEF CON 26 Workshop - Attacking & Auditing Docker Containers Using Open Source
  ☆106Updated 5 years ago
• bcoles / liferay_scan
  A simple remote scanner for Liferay Portal
  ☆18Updated last year
• cji / talks
  Conference talk slides and code
  ☆11Updated 4 years ago
• securityMB / burp-exceptions
  Simple trick to increase readability of exceptions raised by Burp extensions written in Python
  ☆43Updated 7 years ago
• allisonis / gcp-iam-sentinel-examples
  ☆28Updated 4 years ago
• dnet / burp-oauth
  OAuth plugin for Burp Suite Extender
  ☆42Updated 6 years ago