RhinoSecurityLabs/Aggressor-Scripts

Stars
144
Rank 255,590 (Top 6 %)
Language
PowerShell
Created over 6 years ago
Updated over 6 years ago

RhinoSecurityLabs/Aggressor-Scripts

RhinoSecurityLabs

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Aggregation of Cobalt Strike's aggressor scripts.

This is the repository for all publicly available aggressor scripts.

The only current public is UACBypass, whose readme can be found inside its associated folder.

pacu

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

cloudgoat

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

Security-Research

Exploits written by the Rhino Security Labs team

AWS-IAM-Privilege-Escalation

A centralized source of all AWS IAM privilege escalation methods released by Rhino Security Labs.

IPRotate_Burp_Extension

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

CVEs

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

ccat

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

GCPBucketBrute

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

SleuthQL

Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.

Cloud-Security-Research

Cloud-related research releases from the Rhino Security Labs team.

GCP-IAM-Privilege-Escalation

A collection of GCP IAM privilege escalation methods documented by the Rhino Security Labs team.

Swagger-EZ

A tool geared towards pentesting APIs using OpenAPI definitions.

IAMActionHunter

An AWS IAM policy statement parser and query tool.

dsnap

Utility for downloading and mounting EBS snapshots using the EBS Direct API's

Presentations

A collection of slides, videos, and proof-of-concept scripts from various Rhino presentations.

little-stitch

Send and receive bypassing Little Snitch alerting.