76 matches found
kubernetes-goat
Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...
Serverless-Goat
Introduction Thank you for using OWASP ServerlessGoat! This serverless application demonstrates common serverless security flaws as described in the Serverless Security Top 10 Weaknesses guide https://github.com/puresec/sas-top-10. ServerlessGoat was created for the following educational...
CICD-Goat-Vapt-Writeup
CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. 🧭 How This Fits With My Other Repos Repository| What's in...
GoAT
GoAT Golang Advanced Trojan is a trojan created in Go, using Twitter as a the C&C server. GoAT has some very unique and impressive capabilities, including multithreaded command execution and a sophisticated self defence rootkit module written in C. If you're not familiar with malware, please do n...
cicd-goat
Entorno CI/CD deliberadamente vulnerable. Hackea pipelines CI/CD, captura las banderas. 🚩 Creado por Cider Security Adquirida por Palo Alto Networks. Tabla de Contenidos Descripción Descargar y ejecutar Linux y Mac Windows Powershell Uso Instrucciones Acepta el desafío Solución de problemas...
kubernetes-goat
Kubernetes Goat ✨ Il Kubernetes Goat è progettato per essere un ambiente cluster intenzionalmente vulnerabile per imparare e praticare la sicurezza di Kubernetes 🚀 🙌 Fai riferimento a https://madhuakula.com/kubernetes-goat per la guida 📖 🧰 Configurazione di Kubernetes Goat Assicurati di avere...
CICD-Goat-Vapt-Writeup — Updated!
CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. 🧭 How This Fits With My Other Repos Repository| What's in...
VEXAIoT: Autonomous IoT Vulnerability EXploitation Using AI Agents
Internet of Things IoT systems are inherently vulnerable due to constrained hardware, outdated firmware, and insecure default configurations, creating a need for scalable and adaptive security testing approaches. While recent adoptions of Large Language Model LLM agents have demonstrated promise ...
GoAT-X: A Graph of Auditing Thoughts for Securing Token Transactions in Cross-Chain Contracts
Cross-chain bridges, the critical infrastructure of the multi-chain ecosystem, have become a primary target for attackers, resulting in over $2.8 billion in losses due to subtle implementation flaws. Existing defenses, such as bytecode-level static analysis, are ill-equipped to handle the semanti...
EUVD-2025-99693
Malicious code in ytterbicgoatz3n npm...
EUVD-2025-99285
Malicious code in endlessgoatz3n npm...
EUVD-2025-101446
Malicious code in apparentgoatz3n npm...
EUVD-2025-89207
Malicious code in regulatorygoatz3n npm...
EUVD-2025-92971
Malicious code in brainygoatz3n npm...
MAL-2025-116677 Malicious code in regulatory_goat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7890caf2f93c9d60cc23a3cbccf2e1b735a3a260e565d2923cba80792ebae693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-113501 Malicious code in eastern_goat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b5f7a9ca0373319e7ee43e58dcc0a547e697831b7d1da8746af9da9f1374be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-110031 Malicious code in unaware_goat-silentdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe53f7fac6c4f7e5e8d53d7c56254faca355db5a191593f5b5a91a03fc54931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75251
Malicious code in vulnerablegoat-smiletea npm...