Correlates serviceaccounts and pods to the permissions granted to them via rolebindings and clusterrolesbindings.
☆36May 18, 2022Updated 4 years ago
Alternatives and similar repositories for sa-hunter
Users that are interested in sa-hunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Vulnerable Kustomize Kubernetes templates for training and education☆48Jun 21, 2022Updated 4 years ago
- insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.☆50Jan 6, 2022Updated 4 years ago
- Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego☆351Mar 21, 2025Updated last year
- Compares and analyzes GCP IAM roles.☆78Mar 9, 2025Updated last year
- ☆28Jan 31, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆26Feb 19, 2026Updated 7 months ago
- Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env☆102Sep 10, 2019Updated 7 years ago
- ☆23Feb 20, 2023Updated 3 years ago
- Go module that returns supported regions for a service or supported services for a region☆18Dec 12, 2025Updated 9 months ago
- HTTP Brute Forcer (Java replacement for SP's CrowBar).☆12Apr 20, 2017Updated 9 years ago
- Official repository of SyzRisk [ASIA CCS'24]☆12Aug 20, 2024Updated 2 years ago
- ☆32May 12, 2025Updated last year
- OpenCSPM Community Controls☆14May 18, 2021Updated 5 years ago
- Simple tool to identify and remediate the use of the AWS EC2 IMDSv1.☆14Aug 12, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆115Mar 29, 2026Updated 5 months ago
- ☆51Jun 13, 2024Updated 2 years ago
- Generative and mutative fuzzer for Kubernetes admission controller chains by automatically parsing the cluster api specification.☆76Apr 4, 2026Updated 5 months ago
- Generate CodeQL taint-tracking models for Go (along with tests) in a graphical UI☆20May 5, 2023Updated 3 years ago
- POC for leaking java version through file and ftp protocols☆24Nov 1, 2020Updated 5 years ago
- Docker build of GovReady☆14Nov 14, 2023Updated 2 years ago
- AWS CloudSaga - Simulate security events in AWS☆475Updated this week
- slides and papers from (or partly from) Bonan☆20Mar 8, 2024Updated 2 years ago
- Instance type offerings for EC2 instances. Automatic updates weekly.☆15Jun 10, 2021Updated 5 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…☆174Jan 24, 2025Updated last year
- Finders Keypers: AWS KMS Encryption Key Usage and Blast Radius Finder☆49Aug 13, 2025Updated last year
- Utility for downloading and mounting EBS snapshots using the EBS Direct API's☆95Mar 17, 2025Updated last year
- Clean accounts over permissions in GCP infra at scale☆72May 9, 2023Updated 3 years ago
- ☆20Jun 13, 2022Updated 4 years ago
- Kubernetes audit logging, when you don't control the control plane☆94Updated this week
- Kubernetes focused container assessment and context discovery tool for penetration testing☆485Nov 7, 2025Updated 10 months ago
- A kubectl plugin that explains WHY a permission is granted in Kubernetes RBAC by showing the exact Role/ClusterRole + Binding chain.☆17Aug 8, 2026Updated last month
- Take Over the Whole Cluster: Attacking Kubernetes via Excessive Permissions of Third-party Applications☆20May 6, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…☆39Oct 17, 2024Updated last year
- ☆56Aug 26, 2021Updated 5 years ago
- ☆28Aug 6, 2020Updated 6 years ago
- HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…☆17Jun 11, 2024Updated 2 years ago
- Execute a shell command within Cloud Run☆31Jul 7, 2022Updated 4 years ago
- This repository contains examples of Kyverno policies for controlling the creation of Cilium Network policies☆22Nov 2, 2023Updated 2 years ago
- ☆46Nov 7, 2024Updated last year