- Pentesting CI/CD Methodology
- Github Security
- Gitea Security
- Concourse Security
- CircleCI Security
- TravisCI Security
- Jenkins Security
- Apache Airflow Security
- Terraform Security
- Atlantis Security
- Cloudflare Security
- TODO
- Pentesting Cloud Methodology
- Kubernetes Security
- Kubernetes Basics
- Pentesting Kubernetes Services
- Exposing Services in Kubernetes
- Attacking Kubernetes from inside a Pod
- Kubernetes Enumeration
- Kubernetes Role-Based Access Control(RBAC)
- Abusing Roles/ClusterRoles in Kubernetes
- Kubernetes Namespace Escalation
- Kubernetes Pivoting to Clouds
- Kubernetes Network Attacks
- Kubernetes Hardening
- GCP Security
- GCP - Basic Information
- GCP - Non-svc Persistance
- GCP - Permissions for a Pentest
- GCP - Privilege Escalation
- GCP - Apikeys Privesc
- GCP - Cloudbuild Privesc
- GCP - Cloudfunctions Privesc
- GCP - Cloudscheduler Privesc
- GCP - Compute Privesc
- GCP - Composer Privesc
- GCP - Container Privesc
- GCP - Deploymentmaneger Privesc
- GCP - IAM Privesc
- GCP - KMS Privesc
- GCP - Orgpolicy Privesc
- GCP - Resourcemanager Privesc
- GCP - Run Privesc
- GCP - Secretmanager Privesc
- GCP - Serviceusage Privesc
- GCP - Storage Privesc
- GCP - Misc Perms Privesc
- GCP - Network Docker Escape
- GCP - local privilege escalation ssh pivoting
- GCP - Services
- GCP - AI Platform Enum
- GCP - Cloud Functions, App Engine & Cloud Run Enum
- GCP - Compute Instances Enum
- GCP - Compute Network Enum
- GCP - Compute OS-Config Enum
- GCP - Containers, GKE & Composer Enum
- GCP - Databases Enum
- GCP - DNS Enum
- GCP - Filestore Enum
- GCP - IAM & Org Policies Enum
- GCP - KMS and Secrets Management Enum
- GCP - Pub/Sub
- GCP - Source Repositories Enum
- GCP - Stackdriver Enum
- GCP - Storage Enum
- GCP - Unauthenticated Enum
- Workspace Security
- AWS Security
- AWS - Basic Information
- AWS - Permissions for a Pentest
- AWS - Privilege Escalation
- AWS - Apigateway Privesc
- AWS - Codebuild Privesc
- AWS - Codepipeline Privesc
- AWS - Codestar Privesc
- AWS - Cloudformation Privesc
- AWS - Cognito Privesc
- AWS - Datapipeline Privesc
- AWS - DynamoDB Privesc
- AWS - EBS Privesc
- AWS - EC2 Privesc
- AWS - ECR Privesc
- AWS - ECS Privesc
- AWS - EFS Privesc
- AWS - EMR Privesc
- AWS - Glue Privesc
- AWS - IAM Privesc
- AWS - KMS Privesc
- AWS - Lambda Privesc
- AWS - Lightsail Privesc
- AWS - MQ Privesc
- AWS - MSK Privesc
- AWS - RDS Privesc
- AWS - Redshift Privesc
- AWS - S3 Privesc
- AWS - Sagemaker Privesc
- AWS - Secrets Manager Privesc
- AWS - SSM Privesc
- AWS - STS Privesc
- AWS - Misc Privesc
- AWS - Services
- AWS - Security & Detection Services
- AWS - Databases
- AWS - API Gateway Enum
- AWS - CloudFormation & Codestar Enum
- AWS - CloudHSM Enum
- AWS - CloudFront Enum
- AWS - Cognito Enum
- AWS - DataPipeline, CodePipeline, CodeBuild & CodeCommit
- AWS - EC2, EBS, ELB, SSM, VPC & VPN Enum
- AWS - ECS, ECR & EKS Enum
- AWS - EMR Enum
- AWS - EFS Enum
- AWS - Kinesis Data Firehose
- AWS - IAM & STS Enum
- AWS - KMS Enum
- AWS - Lambda Enum
- AWS - Lightsail Enum
- AWS - MQ Enum
- AWS - MSK Enum
- AWS - Route53 Enum
- AWS - Secrets Manager Enum
- AWS - SQS & SNS Enum
- AWS - S3, Athena & Glacier Enum
- AWS - Other Services Enum
- AWS - Unauthenticated Enum
- Azure Security