Alternatives and similar repositories for kind-of-insecure

Users that are interested in kind-of-insecure are comparing it to the libraries listed below

• alexivkin / kubepwn
  Kubernetes Pwnage for all
  ☆56Updated 5 years ago
• calinah / learn-by-hacking-kccn
  ☆50Updated 6 years ago
• nccgroup / go-pillage-registries
  Pentester-focused Docker registry tool to enumerate and pull images
  ☆112Updated 5 years ago
• nodyhub / k8s-ctf-rocks
  Kubernetes Easter CTF
  ☆59Updated 5 years ago
• dxa4481 / AttackingAndDefendingTheGCPMetadataAPI
  This repo gives an overview of some GCP metadata API attack and defend patterns
  ☆77Updated 5 years ago
• nccgroup / ConMachi
  Container Blackbox Security Auditing Tool: enumerates security configuration from within the target container
  ☆106Updated 7 years ago
• mauilion / blackhat-2019
  ☆51Updated 5 years ago
• DolosGroup / Jenkins-Pillage
  A tool for automatically gathering sensitive information from exposed Jenkins servers
  ☆104Updated 3 years ago
• evict / poc_CVE-2018-1002105
  PoC for CVE-2018-1002105.
  ☆222Updated 7 years ago
• antitree / cmd_and_kubectl_demos
  ☆27Updated 2 months ago
• anshumanbh / kubebot
  A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform
  ☆166Updated last year
• averonesis / kubolt
  Kubolt utility for scanning public kubernetes clusters
  ☆110Updated last week
• singe / container-breakouts
  Testing/collecting some container breakouts
  ☆94Updated 6 years ago
• ropnop / pentest_charts
  Some helpful Helm Charts for pentesters
  ☆39Updated 6 years ago
• NotSoSecure / cloud-sec-wiki
  Jekyll Files for cloudsecwiki.com
  ☆49Updated 4 years ago
• raesene / TestingScripts
  A More or less Random Collection of Scripts for security Testing.
  ☆64Updated 3 years ago
• bgeesaman / kube-env-stealer
  Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env
  ☆102Updated 6 years ago
• we45 / Serverless-Workshop
  Serverless Workshop
  ☆16Updated 3 years ago
• TestingPens / Constole
  Scan for and exploit Consul agents
  ☆39Updated 6 years ago
• 4ARMED / kubeletmein
  Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.
  ☆162Updated 3 weeks ago
• PortSwigger / attack-surface-detector
  The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters
  ☆14Updated 3 years ago
• ProfessionallyEvil / harpoon
  A collection of scripts, and tips and tricks for hacking k8s clusters and containers.
  ☆137Updated last year
• quarkslab / minik8s-ctf
  A beginner-friendly CTF about Kubernetes security.
  ☆80Updated 3 years ago
• nccgroup / s3_objects_check
  Whitebox evaluation of effective S3 object permissions, to identify publicly accessible files.
  ☆78Updated 3 years ago
• snyff / oauthsecurity
  OAuth Security Cheatsheet
  ☆40Updated 11 years ago
• bgeesaman / subpath-exploit
  Writeup of CVE-2017-1002101 with sample "exploit"/escape
  ☆35Updated 7 years ago
• NetSPI / AWSSigner
  Burp Extension for AWS Signing
  ☆90Updated 11 months ago
• Soluto / containers-security-project
  A place for documenting threats and mitigations related to containers orchestrators (Kubernetes, Swarm etc)
  ☆25Updated 7 years ago
• raesene / kube_security_lab
  ☆266Updated last year
• VirtueSecurity / aws-extender-cli
  AWS Extender CLI is a command-line script to test S3 buckets as well as Google Storage buckets and Azure Storage containers for common mi…
  ☆83Updated 5 years ago