Publicly Exposed Sensitive Data
13 projects
GitLab SecretsA security tool that scans GitLab repositories for secrets in dangling or force-pushed commits.
Initial Code Execution
28 projects
ActionsTOCTOU (Time Of Check to Time Of Use)A proof-of-concept tool demonstrating and exploiting TOCTOU vulnerabilities in GitHub Actions approval workflows.
Post Exploitation
8 projects
Living off the pipelineA research project inventorying RCE-by-design features and code execution risks in CI/CD pipeline tools.
Defense Evasion
16 projects
PR sneakingDemonstrates methods for sneaking malicious code into GitHub pull requests to raise awareness of supply chain vulnerabilities.
Tools
15 projects
ADOKitA modular attack toolkit for Azure DevOps Services that leverages the REST API for reconnaissance, privilege escalation, and persistence.
GatoA security tool for enumerating and exploiting pipeline vulnerabilities in GitHub Actions workflows and self-hosted runners.
Gato-XA fast scanning and attack toolkit for identifying and exploiting GitHub Actions vulnerabilities at scale.
git-dumperA Python tool to dump a git repository from a website, even when directory listing is disabled.
GitFiveAn OSINT tool to investigate GitHub profiles, tracking usernames, emails, identities, and repositories.
Jenkins Attack FrameworkA command-line tool for security testing and offensive operations against Jenkins CI/CD servers.
Nord StreamA tool for extracting secrets from CI/CD environments by deploying malicious pipelines, supporting Azure DevOps, GitHub, and GitLab.
pwn_jenkinsA collection of notes, scripts, and techniques for exploiting vulnerabilities and attacking Jenkins servers.
Secrets Patterns DatabaseThe largest open-source database of regex patterns for detecting secrets, API keys, passwords, and tokens in code.
zizmorA static analysis tool that finds security vulnerabilities and misconfigurations in GitHub Actions workflows.