ProfessionallyEvil/harpoon

Stars
133
Rank 272,600 (Top 6 %)
Language
Go
License
MIT License
Created over 6 years ago
Updated 3 months ago

ProfessionallyEvil/harpoon

ProfessionallyEvil

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A collection of scripts, and tips and tricks for hacking k8s clusters and containers.

Harpoon

    __  __                                 
   / / / /___ __________  ____  ____  ____ 
  / /_/ / __ `/ ___/ __ \/ __ \/ __ \/ __ \
 / __  / /_/ / /  / /_/ / /_/ / /_/ / / / /
/_/ /_/\__,_/_/  / .___/\____/\____/_/ /_/ 
                /_/       ,   ,
    ~~~~~~~~~~~~~~~~~~~~~~~"o"~~~~
            ____________     o
    	 _--            --_ o
        /       ___      __\ o
       / _         _\    \__o 
      / / |              X  |
     / /   \	           /
    / _ \   \             /
    \/ \/    -.____ ____.-

A collection of tips and tricks for container and container orchestration hacking.

TODO: write documentation

pewapt101

Professionally Evil Web Application Penetration Testing 101

C4

Cyberdelia, a Collection of Command and Control frameworks

client-side-attacks-lab

Lab Environment for learning client-side attacks such as CSRF, Clickjacking, XSS, and CORS abuse.

bloodhound-elementary

Command line tool for analyzing .json files generated by bloodhound.py or sharphound for use in Bloodhound.

x86_asm

x86 Assembly Code Examples for Blog Posts

LD_PRELOAD-rand-Hijack-Example

Code samples to go along with the blog post on using LD_PRELOAD to hijack rand() in a number guessing game.

DVFPS

A Damn Vulnerable FPS game built using Godot

Pequod

Lab VM environment for Container Hacking.

nmap_oui_update

A script to download OUI data from the IEEE and parse it into the nmap-mac-prefixes file so Nmap has the latest OUI data.

bash_tricks

a github repo that will be used for teaching bash optimizations in a youtube series

LD_PRELOAD-run-at-load-time

Code samples to go along with the blog post on how to run code at load/unload time when using LD_PRELOAD to inject libraries.

Python4PEPentesters-exercises

Exercises for the Python for Professionally Evil Pentesters Class

Python4PEPentesters

Python for Professionally Evil Pentesters

SameSiteAttackDemo

A simple demo web app built with Svelte + Restify that is meant to demonstrate security aspects regarding the SameSite cookie flag.

DVMMO

Damn Vulnerable MMO; an mmo game that is deliberately vulnerable and maybe just maybe fun to play.

csik

Client Script Injection Kit

k8s-labs

LD_PRELOAD-accept-backdoor

Code samples to go along with the blog post on how to create an LD_PRELOAD backdoor hooking accept()

CVE-2021-38295-PoC

A simple Python proof of concept for CVE-2021-38295.

cookie-monster

PENT

edit_leaked_file_descriptor

An all-in-one tool to edit a leaked file descriptor in SetUID binaries.

d0hnut

DNS over HTTPS Security Lab

static-analysis-ttp

container-escape-labs

Some container escape labs