gcp_scanner

Disclaimer This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose. GCP Scanner This is a GCP resource scanner that can help determine what level of acces...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

cloud_enum

cloudenum Future of cloudenum I built this tool in 2019 for a pentest involving Azure, as no other enumeration tools supported it at the time. It grew from there, and I learned a lot while adding features. Building tools is fun, but maintaining tools is hard. I haven't actively used this tool...

GATOR

GCP ATTACK TOOLKIT FOR OFFENSIVE RESEARCH GATOR - GCP Attack Toolkit for Offensive Research , a tool designed to aid in research and exploiting Google Cloud Environments. It offers a comprehensive range of modules tailored to support users in various attack stages, spanning from Reconnaissance to...

pack

Password Analysis and Cracking Kit by Peter Kacherginsky iphelix PACK Password Analysis and Cracking Toolkit is a collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other passwo...

offensive-docker-vps

Offensive Docker VPS Create a VPS on Google Cloud Platform or Digital Ocean easily to use Offensive Docker and launch the assessments to the targets. 🎉🎉Digital Ocean Bonus 🎉🎉 You can sign up with my referral link https://m.do.co/c/0d2d40f6a8a1 and get $100 free credit to try it out! Table of...

Cloudtopolis

Cloudtopolis is a tool that facilitates the installation and provisioning of Hashtopolis on the Google Cloud Shell platform, quickly and completely unattended and also, free!. Together with Google Collaboratory, it allows us to break hashes without the need for dedicated hardware from any browser...

gvision

GVision is a reverse image search app that use Google Cloud Vision API to detect landmarks and web entities from images, helping you gather valuable information quickly and easily. https://user-images.githubusercontent.com/37483725/228700363-cc0d8131-4134-4f37-918e-1a342dd22b83.mp4 🤖 About Google...

hayat

Hayat Google Cloud Platform Auditing & Hardening Script What does that mean "Hayat"? Well, I had a hard time finding a unique name, honestly. "Hayat" is a Turkish word which means "Life" in English and also my niece's name. Ready to meet her? 😍 😍 😍 Hayat is a auditing & hardening script for Googl...

sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

EUVD-2026-89463

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...

CVE-2026-93853

The Barman backup tool is vulnerable to unverified ownership during snapshot backup deletion, affecting versions up to and including 3.20.0 (specifically versions from 3.4.0 for Google Cloud, 3.6.0 for Azure, and 3.7.0 for AWS). The root cause is that Barman reads snapshot identifiers from the ba...

domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

professional-services

Professional Services Soluciones y herramientas comunes desarrolladas por el equipo de Professional Services de Google Cloud. Aviso legal Este repositorio y su contenido no son un producto de Google con soporte oficial. Licencia Todas las soluciones de este repositorio se proporcionan bajo la...

CVE-2023-27587-PoC

CVE-2023-27587-PoC El PoC simple de CVE-2023-27587 ¿Qué es ReadToMyShoe? ReadtoMyShoe RTMS es una aplicación web rust, yew y axum que permite subir artículos mediante URL o pegándolos directamente y escucharlos más tarde. Impacto Si se produce un error al añadir un artículo, el sitio web muestra ...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...

kubebot

Kubebot 一款基于谷歌云平台Kubernetes后端构建的安全测试Slackbot 注意：我不再积极维护此项目。我正在与其他人一起开发Kubebot v2，可能会在即将举行的安全会议上展示。 架构 演示 请观看此视频 - https://youtu.be/RKvtyU3CcZk 数据流 1 - 从Slackbot发起的API请求（工具、目标、选项），发送到API服务器，该服务器作为Docker容器运行在Kubernetes（K8s）集群上，并且可以扩展。 2 - API服务器将收到的请求作为消息投递到PubSub工具主题。 3 - 消息发布到工具订阅。 4 -...

cloud_enum

cloudenum cloudenum 的未来 我在2019年构建了这个工具，用于一次涉及Azure的渗透测试，因为当时没有其他枚举工具支持它。它从那里发展起来，在添加功能的过程中我学到了很多。 构建工具很有趣，但维护工具很难。我有一段时间没有积极使用这个工具了，但我已尽力修复错误和审查拉取请求。 向前看，将这些功能整合到一个维护良好、处理基本事项（Web/DNS请求、线程、I/O、日志等）的项目中是合理的。Nuclei 非常适合这个目的。你可以看到我第一个将 cloudenum 功能迁移到 Nuclei 的拉取请求此处。 我鼓励其他人向 Nuclei...

Onionscan

onionscan deployment note! this repo is a patched version of https://github.com/s-rah/onionscan and is designed to be run from a google cloud shell from hunchly at https://github.com/hunchly/funchly/tree/main/onionscan which has been used as the baseline and modified to also be able to deploy on ...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Simple Proof of Concept Tool 🛠 About This Application This tool shows a technical proof of concept PoC for the security issue CVE-2026-2472. The issue affects the Vertex AI Python SDK from Google Cloud Platform. It relates to an unauthenticated and...