1259 matches found
CVE-2026-19485
A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versions prior to 2026-04-27 on Google Cloud Platform allows an attacker knowing the victim's project number to obtain read/write access to staged data and error logs using predictab...
serverless-prey
Puma Security Serverless Prey Serverless Prey is a collection of serverless functions FaaS, that, once launched to a cloud environment and invoked, establish a TCP reverse shell, enabling the user to introspect the underlying container: Panther: AWS Lambda written in Node.js Cougar: Azure Functio...
cloud_enum
cloudenum cloudenum का भविष्य मैंने यह टूल 2019 में Azure से जुड़े एक पेंटेस्ट के लिए बनाया था, क्योंकि उस समय कोई अन्य एनुमरेशन टूल इसका समर्थन नहीं करता था। यह वहाँ से बढ़ता गया, और सुविधाएँ जोड़ते हुए मैंने बहुत कुछ सीखा। टूल बनाना मज़ेदार है, लेकिन उन्हें बनाए रखना कठिन है। मैंने कुछ समय से इ...
cloud_enum
cloudenum Future of cloudenum I built this tool in 2019 for a pentest involving Azure, as no other enumeration tools supported it at the time. It grew from there, and I learned a lot while adding features. Building tools is fun, but maintaining tools is hard. I haven't actively used this tool...
Cloudtopolis
Cloudtopolis एक उपकरण है जो Google Cloud Shell प्लेटफॉर्म पर Hashtopolis की स्थापना और प्रावधान को तेज़ी से और पूरी तरह से बिना किसी पर्यवेक्षण के और मुफ्त भी! सुविधाजनक बनाता है। Google Collaboratory के साथ, यह हमें किसी भी ब्राउज़र से समर्पित हार्डवेयर की आवश्यकता के बिना हैश को तोड़ने की अनुमत...
sish
sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...
offensive-docker
Offensive Docker is an image with the more used tools to create an pentest environment easily and quickly. ➡️ Note: Check out the next repo to know how to launch offensive docker in a VPS in Google Cloud...
offensive-docker
Offensive Docker एक ऐसी इमेज है जिसमें पेन-टेस्टिंग वातावरण को आसानी से और जल्दी से बनाने के लिए अधिक उपयोग किए जाने वाले टूल्स शामिल हैं। ➡️ नोट: Google Cloud Platform या Digital Ocean मुफ्त क्रेडिट सह...
cloudsploit
CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...
CVE-2026-12717 Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection
An Improper Input Validation vulnerability in CData JDBC driver integration in Google Cloud BigQuery Data Transfer Service versions prior to 2026-05-01 on Google Cloud Platform allows an authenticated attacker to achieve remote code execution in the connector container and escalate privileges in...
Onionscan
deploy di onionscan nota! questo repository è una versione patchata di https://github.com/s-rah/onionscan ed è progettato per essere eseguito da una Google Cloud Shell da hunchly su https://github.com/hunchly/funchly/tree/main/onionscan, che è stato usato come base e modificato per poter essere...
hayat
Hayat Script de Auditoria e Hardening do Google Cloud Platform O que significa "Hayat"? Bem, tive dificuldade em encontrar um nome único, honestamente. "Hayat" é uma palavra turca que significa "Life" em inglês e também é o nome da minha sobrinha. Pronto para conhecê-la? 😍 😍 😍 Hayat é um script d...
CVE-2023-27587-PoC
CVE-2023-27587-PoC CVE-2023-27587 का सरल PoC ReadToMyShoe क्या है? ReadtoMyShoe RTMS एक वेब एप्लिकेशन rust, yew और axum है जो आपको लेख अपलोड करने URL के माध्यम से या सीधे पेस्ट करके और बाद में उन्हें सुनने की अनुमति देता है। प्रभाव यदि लेख जोड़ते समय कोई त्रुटि होती है, तो वेबसाइट उपयोगकर्ता को ए...
gvision
GVision ist eine App zur umgekehrten Bildersuche, die die Google Cloud Vision API nutzt, um Sehenswürdigkeiten und Web-Entitäten in Bildern zu erkennen und Ihnen hilft, schnell und einfach wertvolle Informationen zu sammeln...
CVE-2026-2472-Vertex-AI-SDK-Google-Cloud
🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Semplice strumento di proof of concept 🛠 Informazioni su questa applicazione Questo strumento mostra una proof of concept PoC tecnica per il problema di sicurezza CVE-2026-2472. Il problema riguarda l'SDK Python Vertex AI di Google Cloud Platform. È...
kubebot
Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...
kubebot
Kubebot Un Slackbot per test di sicurezza basato su un backend Kubernetes su Google Cloud Platform NOTA: Non sto più mantenendo attivamente questo progetto. Sto lavorando alla v2 di Kubebot insieme ad altre persone, che verrà probabilmente presentata a una delle prossime conferenze di sicurezza...
trident
trident The Trident project is an automated password spraying tool developed to meet the following requirements: the ability to be deployed on several cloud platforms/execution providers the ability to schedule spraying campaigns in accordance with a target’s account lockout policy the ability to...
pack
Password Analysis and Cracking Kit by Peter Kacherginsky iphelix PACK Password Analysis and Cracking Toolkit is a collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other passwo...