rhinosecuritylabs Goto Github PK
Name: Rhino Security Labs
Type: Organization
Bio: A boutique penetration testing and security assessment firm in Seattle, WA.
Location: Seattle, WA
Rhino Security Labs's Projects
aggressor-scripts
Aggregation of Cobalt Strike's aggressor scripts.
amazon-ssm-agent
Fork of amazon-ssm-agent that can run as any user in parallel with the official service.
aws-iam-privilege-escalation
A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.
ccat
Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.
cloud-security-research
Cloud-related research releases from the Rhino Security Labs team.
cloudgoat
CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
cloudscraper
CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.
cves
A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.
dsnap
Utility for downloading and mounting EBS snapshots using the EBS Direct API's
external_c2_framework
Python api for usage with cobalt strike's External C2 specification
gcp-iam-privilege-escalation
A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.
gcpbucketbrute
A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
iamactionhunter
An AWS IAM policy statement parser and query tool.
iprotate_burp_extension
Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
little-stitch
Send and receive bypassing Little Snitch alerting.
pacu
The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.
presentations
A collection of slides, videos, and proof-of-concept scripts from various Rhino presentations.
security-research
Exploits written by the Rhino Security Labs team
sleuthql
Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
swagger-ez
A tool geared towards pentesting APIs using OpenAPI definitions.
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.