Correlates serviceaccounts and pods to the permissions granted to them via rolebindings and clusterrolesbindings.
☆36May 18, 2022Updated 4 years ago
Alternatives and similar repositories for sa-hunter
Users that are interested in sa-hunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Vulnerable Kustomize Kubernetes templates for training and education☆48Jun 21, 2022Updated 4 years ago
- insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.☆50Jan 6, 2022Updated 4 years ago
- Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego☆353Mar 21, 2025Updated last year
- Compares and analyzes GCP IAM roles.☆78Mar 9, 2025Updated last year
- ☆28Jan 31, 2025Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- ☆26Feb 19, 2026Updated 5 months ago
- Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env☆102Sep 10, 2019Updated 6 years ago
- ☆23Feb 20, 2023Updated 3 years ago
- HTTP Brute Forcer (Java replacement for SP's CrowBar).☆12Apr 20, 2017Updated 9 years ago
- Official repository of SyzRisk [ASIA CCS'24]☆12Aug 20, 2024Updated last year
- ☆32May 12, 2025Updated last year
- POC for CVE-2022-23648☆36Mar 29, 2022Updated 4 years ago
- OpenCSPM Community Controls☆14May 18, 2021Updated 5 years ago
- Simple tool to identify and remediate the use of the AWS EC2 IMDSv1.☆14Aug 12, 2021Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆113Mar 29, 2026Updated 4 months ago
- ☆51Jun 13, 2024Updated 2 years ago
- Generative and mutative fuzzer for Kubernetes admission controller chains by automatically parsing the cluster api specification.☆76Apr 4, 2026Updated 4 months ago
- WAF bypass PoC☆51Oct 9, 2023Updated 2 years ago
- Generate CodeQL taint-tracking models for Go (along with tests) in a graphical UI☆20May 5, 2023Updated 3 years ago
- This repository contains a curated list of awesome resources related to AISecOps.☆20Dec 6, 2021Updated 4 years ago
- POC for leaking java version through file and ftp protocols☆24Nov 1, 2020Updated 5 years ago
- K8s Network Policy Migrator is a tool to migrate Calico or Cilium custom network policies to Kubernetes native network policy. The tool o…☆32Aug 29, 2023Updated 2 years ago
- Docker build of GovReady☆14Nov 14, 2023Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- AWS CloudSaga - Simulate security events in AWS☆475Updated this week
- Automated determination of which AWS services run where☆20Updated this week
- slides and papers from (or partly from) Bonan☆20Mar 8, 2024Updated 2 years ago
- CVE-2022-2586: Linux kernel nft_object UAF☆21Sep 3, 2022Updated 3 years ago
- Instance type offerings for EC2 instances. Automatic updates weekly.☆15Jun 10, 2021Updated 5 years ago
- GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…☆173Jan 24, 2025Updated last year
- Finders Keypers: AWS KMS Encryption Key Usage and Blast Radius Finder☆49Aug 13, 2025Updated 11 months ago
- Utility for downloading and mounting EBS snapshots using the EBS Direct API's☆94Mar 17, 2025Updated last year
- Clean accounts over permissions in GCP infra at scale☆72May 9, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆25Feb 11, 2024Updated 2 years ago
- ☆20Jun 13, 2022Updated 4 years ago
- Kubernetes audit logging, when you don't control the control plane☆94Aug 2, 2026Updated last week
- Kubernetes focused container assessment and context discovery tool for penetration testing☆486Nov 7, 2025Updated 9 months ago
- Take Over the Whole Cluster: Attacking Kubernetes via Excessive Permissions of Third-party Applications☆20May 6, 2024Updated 2 years ago
- ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…☆39Oct 17, 2024Updated last year
- ☆28Aug 6, 2020Updated 6 years ago