MTKPI
MTKPI – Multi Tool Kubernetes Pentest Image is a docker image containing all the necessary tools for Kubernetes penetration testing, generated by Kandinsky 2.2. It includes popular tools for pentesting a Kubernetes cluster, covering techniques from the Microsoft Threat Matrix for Kubernetes. Disclaimer: This tool is for testing purposes only and should not be used for malicious acts as it can adversely affect the entire cluster.
FEATURES
ALTERNATIVES
A document that helps inform red team planning by contrasting against the very specific red team style described in Red Teams.
CrackMapExec (CME) - A tool for querying internal database for host and credential information in cybersecurity.
A tool for interacting with Exchange servers remotely and exploiting client-side Outlook features.
An open-source shellcode and PE packer for creating and managing portable executable files.
A collection of precompiled Windows exploits for privilege escalation.
ISF (Industrial Exploitation Framework) - An exploitation framework for industrial systems with various ICS protocol clients and exploit modules.
Cyber security platform for automating adversary emulation, red-team assistance, and incident response, built on the MITRE ATT&CK™ framework.
DueDLLigence is an open-source tool for identifying and analyzing DLL hijacking vulnerabilities in Windows applications, providing automated analysis and remediation guidance.
PINNED
InfoSecHired
An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
Kriptos
An AI-driven data classification and governance platform that automatically discovers, analyzes, and labels sensitive information while providing risk management and compliance capabilities.
System Two Security
An AI-powered platform that automates threat hunting and analysis by processing cyber threat intelligence and generating customized hunt packages for SOC teams.
Aikido Security
Aikido is an all-in-one security platform that combines multiple security scanning and management functions for cloud-native applications and infrastructure.
Permiso
Permiso is an Identity Threat Detection and Response platform that provides comprehensive visibility and protection for identities across multiple cloud environments.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.