gvision

GVision is a reverse image search app that use Google Cloud Vision API to detect landmarks and web entities from images, helping you gather valuable information quickly and easily. https://user-images.githubusercontent.com/37483725/228700363-cc0d8131-4134-4f37-918e-1a342dd22b83.mp4 🤖 About Google...

CVE-2023-27587-PoC

CVE-2023-27587-PoC The simple PoC of CVE-2023-27587 What is ReadToMyShoe? ReadtoMyShoe RTMS is a web application rust, yew and axum that lets you upload articles via URL or via directly pasting and listen to them later. Impact If an error occurs when adding an article, the website shows the user ...

gcp_scanner

Disclaimer This project is not an official Google project. It is not supported by Google and Google specifically disclaims all warranties as to its quality, merchantability, or fitness for a particular purpose. GCP Scanner This is a GCP resource scanner that can help determine what level of acces...

pack

Password Analysis and Cracking Kit by Peter Kacherginsky iphelix PACK Password Analysis and Cracking Toolkit is a collection of utilities developed to aid in analysis of password lists in order to enhance password cracking through pattern detection of masks, rules, character-sets and other passwo...

sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Simple Proof of Concept Tool 🛠 About This Application This tool shows a technical proof of concept PoC for the security issue CVE-2026-2472. The issue affects the Vertex AI Python SDK from Google Cloud Platform. It relates to an unauthenticated and...

GATOR

GCP ATTACK TOOLKIT FOR OFFENSIVE RESEARCH GATOR - GCP Attack Toolkit for Offensive Research , a tool designed to aid in research and exploiting Google Cloud Environments. It offers a comprehensive range of modules tailored to support users in various attack stages, spanning from Reconnaissance to...

cloud_enum

cloudenum cloudenum의 미래 이 도구는 2019년에 Azure를 포함한 침투 테스트를 위해 만들었습니다. 당시에는 다른 열거 도구가 Azure를 지원하지 않았기 때문입니다. 그 이후로 기능이 확장되었고, 기능을 추가하면서 많은 것을 배웠습니다. 도구를 만드는 것은 재미있지만, 유지보수는 어렵습니다. 한동안 이 도구를 적극적으로 사용하지는 않았지만, 버그를 수정하고 풀 리퀘스트를 검토하기 위해 최선을 다했습니다. 앞으로는 이 기능을 잘 유지보수되는 프로젝트에 통합하는 것이 합리적입니다. 해당 프로젝트는 기본적인...

cloud_enum

cloudenum Future of cloudenum I built this tool in 2019 for a pentest involving Azure, as no other enumeration tools supported it at the time. It grew from there, and I learned a lot while adding features. Building tools is fun, but maintaining tools is hard. I haven't actively used this tool...

hayat

Hayat Google Cloud Platform 감사 및 강화 스크립트 "Hayat"이 무슨 뜻인가요? 솔직히 말해서, 독특한 이름을 찾느라 고생했습니다. "Hayat"은 터키어로 영어로 "Life"를 의미하며 제 조카의 이름이기도 합니다. 그녀를 만날 준비가 되셨나요? 😍 😍 😍 Hayat은 Google Cloud Platform 서비스예: Identity & Access Management, 로깅 및 모니터링, 네트워킹, 가상 머신, 스토리지, Cloud SQL 인스턴스, Kubernetes 클러스터에 대한 감사 및 강화...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker root@kitploit: $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker buil...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

kubebot

Kubebot Google Cloud Platform의 Kubernetes 백엔드로 구축된 보안 테스트 Slackbot 참고: 저는 이 프로젝트를 더 이상 적극적으로 유지보수하지 않습니다. 저와 다른 몇몇 사람들이 Kubebot v2를 작업 중이며, 이는 곧 있을 보안 컨퍼런스 중 하나에서 발표될 예정입니다. 아키텍처 데모 이 비디오를 시청하세요 - https://youtu.be/RKvtyU3CcZk 데이터 흐름 1 - Slackbot에서 시작된 API 요청도구, 대상, 옵션은 KubernetesK8s 클러스터에서 Docker...

domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

professional-services

プロフェッショナルサービス Google Cloud のプロフェッショナルサービス チームが開発した一般的なソリューションとツール。 免責事項 このリポジトリおよびその内容は、公式にサポートされている Google 製品ではありません。 ライセンス このリポジトリ内のすべてのソリューションは、 Apache 2.0 ライセンスの下で提供されています。詳細については、 LICENSE ファイルをご覧ください。 例 examples フォルダには、さまざまな Google Cloud Platform...

offensive-docker-vps

Offensive Docker VPS Create a VPS on Google Cloud Platform or Digital Ocean easily to use Offensive Docker and launch the assessments to the targets. 🎉🎉Digital Ocean Bonus 🎉🎉 You can sign up with my referral link https://m.do.co/c/0d2d40f6a8a1 and get $100 free credit to try it out! Table of...

serverless-prey

Puma Security Serverless Prey Serverless Prey is a collection of serverless functions FaaS, that, once launched to a cloud environment and invoked, establish a TCP reverse shell, enabling the user to introspect the underlying container: Panther: AWS Lambda written in Node.js Cougar: Azure Functio...

Onionscan

onionscan deployment note! this repo is a patched version of https://github.com/s-rah/onionscan and is designed to be run from a google cloud shell from hunchly at https://github.com/hunchly/funchly/tree/main/onionscan which has been used as the baseline and modified to also be able to deploy on ...

Cloudtopolis

Cloudtopolis is a tool that facilitates the installation and provisioning of Hashtopolis on the Google Cloud Shell platform, quickly and completely unattended and also, free!. Together with Google Collaboratory, it allows us to break hashes without the need for dedicated hardware from any browser...

CVE-2026-19486

A Server-Side Request Forgery SSRF vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on...