Correlates serviceaccounts and pods to the permissions granted to them via rolebindings and clusterrolesbindings.
☆36May 18, 2022Updated 4 years ago
Alternatives and similar repositories for sa-hunter
Users that are interested in sa-hunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Vulnerable Kustomize Kubernetes templates for training and education☆48Jun 21, 2022Updated 4 years ago
- insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.☆50Jan 6, 2022Updated 4 years ago
- Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego☆351Mar 21, 2025Updated last year
- Compares and analyzes GCP IAM roles.☆78Mar 9, 2025Updated last year
- ☆28Jan 31, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆26Feb 19, 2026Updated 7 months ago
- Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env☆102Sep 10, 2019Updated 7 years ago
- ☆23Feb 20, 2023Updated 3 years ago
- Go module that returns supported regions for a service or supported services for a region☆18Dec 12, 2025Updated 9 months ago
- Official repository of SyzRisk [ASIA CCS'24]☆12Aug 20, 2024Updated 2 years ago
- ☆32May 12, 2025Updated last year
- POC for CVE-2022-23648☆36Mar 29, 2022Updated 4 years ago
- OpenCSPM Community Controls☆14May 18, 2021Updated 5 years ago
- Simple tool to identify and remediate the use of the AWS EC2 IMDSv1.☆14Aug 12, 2021Updated 5 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆115Sep 25, 2026Updated 2 weeks ago
- ☆51Jun 13, 2024Updated 2 years ago
- WAF bypass PoC☆51Oct 9, 2023Updated 3 years ago
- Generative and mutative fuzzer for Kubernetes admission controller chains by automatically parsing the cluster api specification.☆76Apr 4, 2026Updated 6 months ago
- This repository contains a curated list of awesome resources related to AISecOps.☆20Dec 6, 2021Updated 4 years ago
- Tool for obfuscating and deobfuscating data.☆80Mar 20, 2024Updated 2 years ago
- Docker build of GovReady☆14Nov 14, 2023Updated 2 years ago
- AWS CloudSaga - Simulate security events in AWS☆475Updated this week
- slides and papers from (or partly from) Bonan☆21Mar 8, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- CVE-2022-2586: Linux kernel nft_object UAF☆21Sep 3, 2022Updated 4 years ago
- Instance type offerings for EC2 instances. Automatic updates weekly.☆14Jun 10, 2021Updated 5 years ago
- GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…☆174Jan 24, 2025Updated last year
- Finders Keypers: AWS KMS Encryption Key Usage and Blast Radius Finder☆49Aug 13, 2025Updated last year
- Utility for downloading and mounting EBS snapshots using the EBS Direct API's☆95Mar 17, 2025Updated last year
- Clean accounts over permissions in GCP infra at scale☆72May 9, 2023Updated 3 years ago
- ☆25Feb 11, 2024Updated 2 years ago
- ☆20Jun 13, 2022Updated 4 years ago
- Kubernetes audit logging, when you don't control the control plane☆94Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Kubernetes focused container assessment and context discovery tool for penetration testing☆487Nov 7, 2025Updated 11 months ago
- A kubectl plugin that explains WHY a permission is granted in Kubernetes RBAC by showing the exact Role/ClusterRole + Binding chain.☆17Aug 8, 2026Updated 2 months ago
- Take Over the Whole Cluster: Attacking Kubernetes via Excessive Permissions of Third-party Applications☆20May 6, 2024Updated 2 years ago
- ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…☆39Oct 17, 2024Updated last year
- ☆28Aug 6, 2020Updated 6 years ago
- HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…☆17Jun 11, 2024Updated 2 years ago
- ☆46Nov 7, 2024Updated last year