Trends at Blackhat Asia 2022

• kubesploit

  23 1,071 0.0 Go

  Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized environments.

  

Kubesploit

• kdigger

  3 404 0.0 Go

  Kubernetes focused container assessment and context discovery tool for penetration testing

  

Kdigger

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• minik8s-ctf

  1 71 0.0 Shell

  A beginner-friendly CTF about Kubernetes security.

  

This CLI tool is similar to the first one, but also recommended as it keeps adding improvements. To present the features, the demo shows a minik8s-ctf environment. It is really great to test and implement the new features.

• ThunderCloud

  1 114 0.0 Python

  Cloud Exploit Framework

  

ThunderCloud

• combobulator

  1 85 4.0 Python

  Dependency Combobulator

  

In Supply Chain Attacks, three tools were presented. Dependency Combobulator detects dependency confusion using heuristics; for example, if the repository is public or time since last change. Similar to packj but in this case, it implements metadata (if the repository activates 2FA) or typosquatting detection, finding packages with similar names to avoid errors. ChainAlert focuses on automation and detection of dependency commitment using the difference of tags between Github and NPM, but detection is very low.

• packj

  38 614 7.2 Python

  Packj stops :zap: Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain

  

In Supply Chain Attacks, three tools were presented. Dependency Combobulator detects dependency confusion using heuristics; for example, if the repository is public or time since last change. Similar to packj but in this case, it implements metadata (if the repository activates 2FA) or typosquatting detection, finding packages with similar names to avoid errors. ChainAlert focuses on automation and detection of dependency commitment using the difference of tags between Github and NPM, but detection is very low.

• chainalert-github-action

  1 39 1.8 JavaScript

  scans popular packages and alerts in cases there is suspicion of an account takeover

  

In Supply Chain Attacks, three tools were presented. Dependency Combobulator detects dependency confusion using heuristics; for example, if the repository is public or time since last change. Similar to packj but in this case, it implements metadata (if the repository activates 2FA) or typosquatting detection, finding packages with similar names to avoid errors. ChainAlert focuses on automation and detection of dependency commitment using the difference of tags between Github and NPM, but detection is very low.

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• pwnppeteer

  1 12 10.0 JavaScript
  

Pwnppeteer is an offensive tool to manage the phishing attacks with lambda functions to automate the process

• Telegrip

  1 16 0.0 Python

  Telegrip is a digital forensic tool that provides acquistion and analysis for Telegram-related cases.

Telegrip assists in obtaining evidence from telegrams for android devices with an autopsy-like UI, a great forensic tool.

Suggest a related project