Lucene search
+L

1479 matches found

Kitploit
Kitploit
added 2026/09/13 12:25 p.m.7 views

Dop2Mop

Dop2Mop A proof-of-concept OpenGraph collector for BloodHound that maps attack paths from DevOps to MLOps infrastructure. Based on Pipelines of Privilege: Attack Paths from DevOps to MLOps Infrastructure by Brett Hawkins @h4wkst3r. Table of Contents Acknowledgments Overview Supported Platforms...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 11:18 a.m.10 views

ObfuscatedSharpCollection

Obfuscated SharpCollection Quick and dirty stab at automated Obfuscation using yetAnotherObfuscator by @0xcc00 together with fresh builds of common C offensive tools, in a CDI fashion using Azure DevOps release pipelines. Obfuscated SharpCollection is not intended to be as complete as the...

5.9AI score
SaveExploits0References17
Kitploit
Kitploit
added 2026/09/13 11:00 a.m.11 views

nord-stream

Nord Stream Nord Stream is a tool that allows you extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab. Find out more in the following blogpost:...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 10:23 a.m.13 views

threatcl

threatcl Modelado de Amenazas con HCL ¿Qué pasó con hcltm? hcltm ha sido renombrado a threatcl. ¡Bienvenido! Resumen !TIP ¿Quieres leer la nueva documentación? Dirígete a threatcl.dev Hay muchas formas diferentes de documentar un modelo de amenazas. Desde un archivo de texto simple, hasta...

6.2AI score
SaveExploits0References12
Kitploit
Kitploit
added 2026/09/13 9:59 a.m.11 views

sast-scan

Introducción root@kitploit: ███████╗ ██████╗ █████╗ ███╗ ██╗ ██╔════╝██╔════╝██╔══██╗████╗ ██║ ███████╗██║ ███████║██╔██╗ ██║ ╚════██║██║ ██╔══██║██║╚██╗██║ ███████║╚██████╗██║ ██║██║ ╚████║ ╚══════╝ ╚═════╝╚═╝ ╚═╝╚═╝ ╚═══╝ Scan es una herramienta de seguridad gratuita y de código abierto para...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 7:47 a.m.13 views

ADOKit

ADOKit Description Azure DevOps Services Attack Toolkit - ADOKit es un conjunto de herramientas que se puede utilizar para atacar servicios de Azure DevOps aprovechando la API REST disponible. La herramienta permite al usuario especificar un módulo de ataque, junto con credenciales válidas clave...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/13 5:11 a.m.40 views

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

5.7AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 4:50 a.m.4 views

DevSec-Defense

DevSec-Defense Módulos de PowerShell y demos complementarios para la presentación de DevSec Defense DevSec Defense: Cómo las prácticas de DevOps pueden impulsar el desarrollo de detección para defensores...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/13 3:49 a.m.52 views

kubestriker

A Blazing fast Security Auditing tool for kubernetes!!...

5.4AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 3:35 a.m.5 views

glue

OWASP Glue Glue es un framework para ejecutar una serie de herramientas. Generalmente, está concebido como la base para automatizar un pipeline de análisis de seguridad con herramientas. Uso recomendado Para aquellos que deseen ejecutar Glue, recomendamos usar la imagen Docker porque ya debería...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/13 2:07 a.m.5 views

cumulus

OWASP Cumulus - Threat modeling the clouds Cumulus is the easy way to bring security into cloud and devOps teams. As a variant of the card game Elevation of Privilege it follows the idea to threat model a system via gamification. This lightweight and low-barrier approach helps you find threats to...

6AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/12 6:09 p.m.5 views

Nebula

Nebula Nebula es un marco de trabajo de Pruebas de Penetración en la Nube y con suerte DevOps. Está construido con módulos para cada proveedor y cada funcionalidad. A partir de abril de 2021, solo cubre AWS, pero es un proyecto en curso y con suerte seguirá creciendo para probar GCP, Azure,...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/12 5:41 p.m.6 views

DevSecOpsGuideline

Directrices DevSecOps de OWASP Las Directrices DevSecOps de OWASP explican cómo podemos implementar un pipeline seguro, utilizar las mejores prácticas e introducir herramientas que podemos emplear en este ámbito. Además, el proyecto intenta ayudarnos a promover la cultura de seguridad de...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 5:38 p.m.377 views

archerysec

...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/12 1:41 p.m.117 views

laforge

Laforge Security Competition Infrastructure Automation Framework Laforge enables rapid development of infrastructure for the purpose of information security competitions. Using a simple and intuitive configuration language, Laforge manages a dependency graph and state management and allows for...

5.6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/11 3:44 p.m.7 views

POC-CVE-2026-42826-2026-42826-Microsoft-Azure-DevOps-Information-Disclosure-Vulnerability

CVE-2026-42826 — Azure DevOps Information Disclosure PoC Overview Field| Value ---|--- CVE| CVE-2026-42826 CVSS| 10.0 Critical Microsoft / 7.5 High NVD CWE| CWE-200 Exposure of Sensitive Information to an Unauthorized Actor GHSA| GHSA-gmwx-3xm2-9fx8 Affected| Azure DevOps Services, Azure DevOps...

10CVSS8.3AI score0.0084EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/11 10:15 a.m.11 views

SharpCollection

SharpCollection Nightly builds of common C offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines. Is your favorite tool missing? Feel free to open an issue or DM me on X @Flangvik Please note that Cobalt Strike's...

5.9AI score
SaveExploits0References16
Kitploit
Kitploit
added 2026/09/11 9:36 a.m.8 views

sysmon-parser

sysmon-parser Automatically generated Sysmon parser for Azure Sentinel Sysmon-AllVersionsParser.txt can be loaded as a function in Azure Sentinel to parse all your events. There is an Azure Devops pipeline that triggers daily to install the latest Sysmon version, extracts the schema and populates...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/07 8:50 a.m.9 views

azuredevops-enum

ado-enum A command-line tool for enumerating Azure DevOps organisations using a Personal Access Token PAT. It queries the Azure DevOps REST API to surface projects, repositories, service connections, builds, build artefacts, and security settings — useful during authorised security assessments of...

6AI score
SaveExploits0References1
Nuclei
Nuclei
added 2026/08/29 10:07 a.m.458 views

Ingress-Nginx Controller - Remote Code Execution

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...

9.8CVSS7.3AI score0.99525EPSS
SaveExploits20References5
Rows per page
Query Builder