Correlates serviceaccounts and pods to the permissions granted to them via rolebindings and clusterrolesbindings.
☆36May 18, 2022Updated 4 years ago
Alternatives and similar repositories for sa-hunter
Users that are interested in sa-hunter are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Vulnerable Kustomize Kubernetes templates for training and education☆48Jun 21, 2022Updated 4 years ago
- insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.☆50Jan 6, 2022Updated 4 years ago
- Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego☆351Mar 21, 2025Updated last year
- Compares and analyzes GCP IAM roles.☆78Mar 9, 2025Updated last year
- ☆28Jan 31, 2025Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆26Feb 19, 2026Updated 6 months ago
- Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env☆102Sep 10, 2019Updated 6 years ago
- Go module that returns supported regions for a service or supported services for a region☆18Dec 12, 2025Updated 8 months ago
- HTTP Brute Forcer (Java replacement for SP's CrowBar).☆12Apr 20, 2017Updated 9 years ago
- Official repository of SyzRisk [ASIA CCS'24]☆12Aug 20, 2024Updated 2 years ago
- ☆32May 12, 2025Updated last year
- POC for CVE-2022-23648☆36Mar 29, 2022Updated 4 years ago
- OpenCSPM Community Controls☆14May 18, 2021Updated 5 years ago
- ☆114Mar 29, 2026Updated 5 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆51Jun 13, 2024Updated 2 years ago
- Generative and mutative fuzzer for Kubernetes admission controller chains by automatically parsing the cluster api specification.☆76Apr 4, 2026Updated 4 months ago
- WAF bypass PoC☆51Oct 9, 2023Updated 2 years ago
- POC for leaking java version through file and ftp protocols☆24Nov 1, 2020Updated 5 years ago
- Tool for obfuscating and deobfuscating data.☆79Mar 20, 2024Updated 2 years ago
- K8s Network Policy Migrator is a tool to migrate Calico or Cilium custom network policies to Kubernetes native network policy. The tool o…☆32Aug 29, 2023Updated 3 years ago
- Docker build of GovReady☆14Nov 14, 2023Updated 2 years ago
- AWS CloudSaga - Simulate security events in AWS☆475Updated this week
- Automated determination of which AWS services run where☆20Aug 15, 2026Updated 2 weeks ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- slides and papers from (or partly from) Bonan☆20Mar 8, 2024Updated 2 years ago
- CVE-2022-2586: Linux kernel nft_object UAF☆21Sep 3, 2022Updated 3 years ago
- Instance type offerings for EC2 instances. Automatic updates weekly.☆15Jun 10, 2021Updated 5 years ago
- GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfigurati…☆174Jan 24, 2025Updated last year
- Finders Keypers: AWS KMS Encryption Key Usage and Blast Radius Finder☆49Aug 13, 2025Updated last year
- Utility for downloading and mounting EBS snapshots using the EBS Direct API's☆94Mar 17, 2025Updated last year
- ☆25Feb 11, 2024Updated 2 years ago
- Kubernetes audit logging, when you don't control the control plane☆94Aug 20, 2026Updated last week
- Kubernetes focused container assessment and context discovery tool for penetration testing☆486Nov 7, 2025Updated 9 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A kubectl plugin that explains WHY a permission is granted in Kubernetes RBAC by showing the exact Role/ClusterRole + Binding chain.☆17Aug 8, 2026Updated 3 weeks ago
- Take Over the Whole Cluster: Attacking Kubernetes via Excessive Permissions of Third-party Applications☆20May 6, 2024Updated 2 years ago
- ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…☆39Oct 17, 2024Updated last year
- ☆56Aug 26, 2021Updated 5 years ago
- ☆28Aug 6, 2020Updated 6 years ago
- HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…☆17Jun 11, 2024Updated 2 years ago
- Execute a shell command within Cloud Run☆31Jul 7, 2022Updated 4 years ago