Rhino Security Labs

Repositories

• pacu

  The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

  python aws security penetration-testing aws-security
  Python BSD-3-Clause 312 1,713 15 6 Updated Nov 3, 2020

• cloudgoat

  CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool
  HCL BSD-3-Clause 192 980 9 13 Updated Oct 20, 2020

• IPRotate_Burp_Extension

  Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

  hacking aws-apigateway webapp penetration-testing burpsuite
  Python 75 412 5 0 Updated Oct 16, 2020

• Security-Research

  Exploits written by the Rhino Security Labs team
  Python BSD-3-Clause 239 813 8 5 Updated Aug 17, 2020

• CVEs

  A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.
  Python BSD-3-Clause 133 368 0 0 Updated Jul 22, 2020

• GCPBucketBrute

  A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.
  Python 42 217 2 1 Updated Jun 3, 2020

• GCP-IAM-Privilege-Escalation

  A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.
  Python BSD-3-Clause 14 50 1 0 Updated May 6, 2020

• Cloud-Security-Research

  Cloud-related research releases from the Rhino Security Labs team.
  Python BSD-3-Clause 45 245 0 0 Updated Apr 23, 2020

• ccat

  Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

  docker kubernetes aws google cloud amazon gcp
  Python BSD-3-Clause 45 278 2 0 Updated Nov 21, 2019

• SleuthQL

  Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
  Python BSD-3-Clause-Clear 83 416 5 (1 issue needs help) 1 Updated Nov 14, 2019

• AWS-IAM-Privilege-Escalation

  A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.
  BSD-3-Clause 75 674 1 0 Updated Jul 25, 2019

• Swagger-EZ

  A tool geared towards pentesting APIs using OpenAPI definitions.
  JavaScript BSD-3-Clause 16 93 0 0 Updated Apr 5, 2019

• Presentations

  A collection of slides, videos, and proof-of-concept scripts from various Rhino presentations.
  BSD-3-Clause 2 33 0 0 Updated Aug 13, 2018

• Aggressor-Scripts

  Aggregation of Cobalt Strike's aggressor scripts.
  PowerShell 35 109 1 0 Updated Mar 31, 2018

• external_c2_framework

  Forked from Und3rf10w/external_c2_framework

  Python api for usage with cobalt strike's External C2 specification
  Python 79 48 0 0 Updated Feb 15, 2018