zrthstr

GTFONow

Automatic privilege escalation for misconfigured capabilities, sudo and suid binaries using GTFOBins.

blossom

Blobs stored simply on mediaservers

gh-hijack-runner

A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets.

Prowlarr

iam-vulnerable

Use Terraform to create your own vulnerable by design AWS IAM privilege escalation playground.

nglscenes

Generate and manipulate neuroglancer scenes

neuroglancer

WebGL-based viewer for volumetric data

graphquail

Burp Suite extension that offers a toolkit for testing GraphQL endpoints.

git-agecrypt

gato

GitHub Actions Pipeline Enumeration and Attack Tool

tracker-scraper

A simple torrent tracker scraper

aiobtdht

Asyncio Bittorrent DHT server

rbac-police

Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego

AADInternals

AADInternals PowerShell module for administering Azure AD and Office 365

CVE-2023-4911

CVE-2023-4911 proof of concept

defcon31

prowler

Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

awesome-google-vrp-writeups

🐛 A list of writeups from the Google VRP Bug Bounty program

bf-aws-permissions

flatnotes

A self-hosted, database-less note taking web app that utilises a flat folder of markdown files for storage.

cartography-queries

Utilities for programmatic analysis of Cartography data.

cicd-goat

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

computer-science

:mortar_board: Path to a free self-taught education in Computer Science!

SecurityExplained

SecurityExplained is a new series after the previous learning challenge series #Learn365. The aim of #SecurityExplained series is to create informational content in multiple formats and share with the community to enable knowledge creation and learning.

PurplePanda

Identify privilege escalation paths within and across different clouds

libgen_torrent_cardiography

Monitor Library Genesis and Sci-Hub's torrent health

ipatool

Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store

hbctool

Hermes Bytecode Reverse Engineering Tool (Assemble/Disassemble Hermes Bytecode)

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

Shellcode-Encryptor

A simple shell code encryptor/decryptor/executor to bypass anti virus.