Rhino Security Labs

Rhino Security Labs's repositories

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Language:PythonBSD-3-Clause4083 109 122

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

Language:PythonBSD-3-Clause2781 71 104

Security-Research

Exploits written by the Rhino Security Labs team

Language:PythonBSD-3-Clause1044 62 14

AWS-IAM-Privilege-Escalation

A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.

BSD-3-Clause883 33 1

IPRotate_Burp_Extension

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

Language:Python779 18 49

CVEs

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

Language:PythonBSD-3-Clause770 39 3

ccat

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

Language:PythonBSD-3-Clause576 23 2

SleuthQL

Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.

Language:PythonBSD-3-Clause-Clear460 24 7

GCPBucketBrute

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

Language:PythonBSD-3-Clause451 8 8

Cloud-Security-Research

Cloud-related research releases from the Rhino Security Labs team.

Language:PythonBSD-3-Clause349 22 1

GCP-IAM-Privilege-Escalation

A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.

Language:PythonBSD-3-Clause320 9 6

Swagger-EZ

A tool geared towards pentesting APIs using OpenAPI definitions.

Language:JavaScriptBSD-3-Clause165 5 1

Aggressor-Scripts

Aggregation of Cobalt Strike's aggressor scripts.

Language:PowerShell146 9 1

IAMActionHunter

An AWS IAM policy statement parser and query tool.

Language:PythonApache-2.0143 20

dsnap

Utility for downloading and mounting EBS snapshots using the EBS Direct API's

Language:PythonBSD-3-Clause66 5 6

external_c2_framework

Python api for usage with cobalt strike's External C2 specification

Language:Python65 70

Presentations

A collection of slides, videos, and proof-of-concept scripts from various Rhino presentations.

BSD-3-Clause37 80

CloudScraper

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

Language:PythonMIT26 20

little-stitch

Send and receive bypassing Little Snitch alerting.

Language:Go9 40

amazon-ssm-agent

Fork of amazon-ssm-agent that can run as any user in parallel with the official service.

Language:GoApache-2.04 10