GitHub Actions Pipeline Enumeration and Attack Tool Gato is a tool designed to enumerate and attack GitHub Actions pipelines. It allows you to enumerate pipeline configurations, identify potential vulnerabilities, and even execute malicious code within the pipeline. Gato is a powerful tool for security researchers and penetration testers looking to test the security of GitHub Actions pipelines.
A Live CD and Live USB for penetration testing and security assessment
Back-end component for red team operations with crucial design considerations.
A project for demonstrating AWS attack techniques with a focus on ethical hacking practices.
A tool for interacting with the MSBuild API, enabling malicious activities and evading detection.
An image with commonly used tools for creating a pentest environment easily and quickly, with detailed instructions for launching in a VPS.
GraphSpy is a token management tool that allows users to store and manage access and refresh tokens for multiple users and scopes in one location.
RTA provides a framework of scripts for blue teams to test detection capabilities against malicious tradecraft, modeled after MITRE ATT&CK.
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.