Gato
GitHub Actions Pipeline Enumeration and Attack Tool Gato is a tool designed to enumerate and attack GitHub Actions pipelines. It allows you to enumerate pipeline configurations, identify potential vulnerabilities, and even execute malicious code within the pipeline. Gato is a powerful tool for security researchers and penetration testers looking to test the security of GitHub Actions pipelines.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Kali Linux is a specialized Linux distribution for cybersecurity professionals, focusing on penetration testing and security auditing.
A command that builds and executes command lines from standard input, allowing for the execution of commands with multiple arguments.
Interactive online malware sandbox for real-time analysis and threat intelligence
A CVE compliant archive of public exploits and corresponding vulnerable software, and a categorized index of Internet search engine queries designed to uncover sensitive information.
SharpPrinter enables efficient discovery of network printers for security and management purposes.
A collection of Python scripts for password spraying attacks against Lync/S4B & OWA, featuring Atomizer, Vaporizer, Aerosol, and Spindrift tools.
SauronEye helps in identifying files containing sensitive data such as passwords through targeted directory searches.
A digital archive of the internet, allowing users to capture and browse archived web pages.
PINNED
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.