The Google Cloud Developer's Cheat Sheet

Protect against subdomain takeover

Discover vulnerabilities and container image misconfiguration in production environments.

Open Cloud Security Posture Management Engine

A OpenID / Proxy service

Tools for the analysis of FinSpy/FinFisher components #spyware #trojan #govware

Exploit for CVE-2019-11043

PoC code to extract private keys from Windows 10's built in ssh-agent service

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

Jenkins RCE Proof-of-Concept: SECURITY-1266 / CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)

Comet is an alert distribution framework which allows you to distribute alerts all the way to the resource owner with customizable owner lookup, de-duplication, alert formatting as well as automate…

Comet is an alert distribution framework which allows you to distribute alerts all the way to the resource owner with customizable owner lookup, de-duplication, alert formatting as well as automate…

Comet is an alert distribution framework which allows you to distribute alerts all the way to the resource owner with customizable owner lookup, de-duplication, alert formatting as well as automate…

In-depth attack surface mapping and asset discovery

This repo is for demonstration purposes only.