Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)

BlockBlock provides continual protection by monitoring persistence locations.

A bare minimum hypervisor on AMD and Intel processors for learners.

PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

A simple mitmproxy blueprint to intercept HTTPS traffic from app running on Kubernetes

Kubernetes tool for scanning clusters for network policies and identifying unprotected workloads.

Enumeration/exploit/analysis/download/etc pentesting framework for GCP; modeled like Pacu for AWS; a product of numerous hours via @WebbinRoot

An analytical challenge created to test junior analysts looking to try performing proactive and reactive cyber threat intelligence.

fireELF - Fileless Linux Malware Framework

docker container escape check || Docker 容器逃逸检测

kpexec is a kubernetes cli that runs commands in a container with high privileges.

Privilege Escalation Enumeration Script for Windows

Kubernetes controller to enable automatic kubelet CSR validation after a series of (configurable) security checks

Built-in Panther detection rules and policies

A collection of tools that I use in CTF's or for assessments

GERMY is a Linux Kernel n-day in the N_GSM line discipline

Games and exercises to learn about browsers and security

AWACS for RBAC. Tool for auditing CRUD permissions in Kubernetes' RBAC.

ripgrep recursively searches directories for a regex pattern while respecting your gitignore

Adds "modifier key + mouse drag" move and resize to OSX

A blazing fast™ multithreaded ROP Gadget finder. ropper / ropgadget alternative

Active Directory and Internal Pentest Cheatsheets

A Ghidra script to save small patches back to the executable file

Collection of YARA-L 2.0 sample rules for the Chronicle Detection API

Terraform module to set up alerts detecting manual actions using SNS. Monitors EKS Audit Logs and notifies subscribed operators when manual changes occur in the cluster

A series of mini-projects used to learn C for beginners