Dop2Mop

Dop2Mop A proof-of-concept OpenGraph collector for BloodHound that maps attack paths from DevOps to MLOps infrastructure. Based on Pipelines of Privilege: Attack Paths from DevOps to MLOps Infrastructure by Brett Hawkins @h4wkst3r. Table of Contents Acknowledgments Overview Supported Platforms...

ObfuscatedSharpCollection

Obfuscated SharpCollection Quick and dirty stab at automated Obfuscation using yetAnotherObfuscator by @0xcc00 together with fresh builds of common C offensive tools, in a CDI fashion using Azure DevOps release pipelines. Obfuscated SharpCollection is not intended to be as complete as the...

nord-stream

Nord Stream Nord Stream is a tool that allows you extract secrets stored inside CI/CD environments by deploying malicious pipelines. It currently supports Azure DevOps, GitHub and GitLab. Find out more in the following blogpost:...

threatcl

threatcl Modelado de Amenazas con HCL ¿Qué pasó con hcltm? hcltm ha sido renombrado a threatcl. ¡Bienvenido! Resumen !TIP ¿Quieres leer la nueva documentación? Dirígete a threatcl.dev Hay muchas formas diferentes de documentar un modelo de amenazas. Desde un archivo de texto simple, hasta...

sast-scan

Introducción root@kitploit: ███████╗ ██████╗ █████╗ ███╗ ██╗ ██╔════╝██╔════╝██╔══██╗████╗ ██║ ███████╗██║ ███████║██╔██╗ ██║ ╚════██║██║ ██╔══██║██║╚██╗██║ ███████║╚██████╗██║ ██║██║ ╚████║ ╚══════╝ ╚═════╝╚═╝ ╚═╝╚═╝ ╚═══╝ Scan es una herramienta de seguridad gratuita y de código abierto para...

ADOKit

ADOKit Description Azure DevOps Services Attack Toolkit - ADOKit es un conjunto de herramientas que se puede utilizar para atacar servicios de Azure DevOps aprovechando la API REST disponible. La herramienta permite al usuario especificar un módulo de ataque, junto con credenciales válidas clave...

chaos

chaos chaos is an 'origin' IP scanner developed by RST in collaboration with ChatGPT. It is a niche utility with an intended audience of mostly penetration testers and bug hunters. An origin-IP is a term-of-art expression describing the final public IP destination for websites that are publicly...

DevSec-Defense

DevSec-Defense Módulos de PowerShell y demos complementarios para la presentación de DevSec Defense DevSec Defense: Cómo las prácticas de DevOps pueden impulsar el desarrollo de detección para defensores...

kubestriker

A Blazing fast Security Auditing tool for kubernetes!!...

glue

OWASP Glue Glue es un framework para ejecutar una serie de herramientas. Generalmente, está concebido como la base para automatizar un pipeline de análisis de seguridad con herramientas. Uso recomendado Para aquellos que deseen ejecutar Glue, recomendamos usar la imagen Docker porque ya debería...

cumulus

OWASP Cumulus - Threat modeling the clouds Cumulus is the easy way to bring security into cloud and devOps teams. As a variant of the card game Elevation of Privilege it follows the idea to threat model a system via gamification. This lightweight and low-barrier approach helps you find threats to...

Nebula

Nebula Nebula es un marco de trabajo de Pruebas de Penetración en la Nube y con suerte DevOps. Está construido con módulos para cada proveedor y cada funcionalidad. A partir de abril de 2021, solo cubre AWS, pero es un proyecto en curso y con suerte seguirá creciendo para probar GCP, Azure,...

DevSecOpsGuideline

Directrices DevSecOps de OWASP Las Directrices DevSecOps de OWASP explican cómo podemos implementar un pipeline seguro, utilizar las mejores prácticas e introducir herramientas que podemos emplear en este ámbito. Además, el proyecto intenta ayudarnos a promover la cultura de seguridad de...

archerysec

...

laforge

Laforge Security Competition Infrastructure Automation Framework Laforge enables rapid development of infrastructure for the purpose of information security competitions. Using a simple and intuitive configuration language, Laforge manages a dependency graph and state management and allows for...

POC-CVE-2026-42826-2026-42826-Microsoft-Azure-DevOps-Information-Disclosure-Vulnerability

CVE-2026-42826 — Azure DevOps Information Disclosure PoC Overview Field| Value ---|--- CVE| CVE-2026-42826 CVSS| 10.0 Critical Microsoft / 7.5 High NVD CWE| CWE-200 Exposure of Sensitive Information to an Unauthorized Actor GHSA| GHSA-gmwx-3xm2-9fx8 Affected| Azure DevOps Services, Azure DevOps...

SharpCollection

SharpCollection Nightly builds of common C offensive tools, fresh from their respective master branches built and released in a CDI fashion using Azure DevOps release pipelines. Is your favorite tool missing? Feel free to open an issue or DM me on X @Flangvik Please note that Cobalt Strike's...

sysmon-parser

sysmon-parser Automatically generated Sysmon parser for Azure Sentinel Sysmon-AllVersionsParser.txt can be loaded as a function in Azure Sentinel to parse all your events. There is an Azure Devops pipeline that triggers daily to install the latest Sysmon version, extracts the schema and populates...

azuredevops-enum

ado-enum A command-line tool for enumerating Azure DevOps organisations using a Personal Access Token PAT. It queries the Azure DevOps REST API to surface projects, repositories, service connections, builds, build artefacts, and security settings — useful during authorised security assessments of...

Ingress-Nginx Controller - Remote Code Execution

A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. Note...