13 open source projects by RhinoSecurityLabs

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

The AWS exploitation framework, designed for testing the security of Amazon Web Services environments.

Aggregation of Cobalt Strike's aggressor scripts.

A tool geared towards pentesting APIs using OpenAPI definitions.

CloudGoat is Rhino Security Labs' "Vulnerable by Design" AWS deployment tool

Exploits written by the Rhino Security Labs team

Extension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.

Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.

A collection of proof-of-concept exploit scripts written by the team at Rhino Security Labs for various CVEs.

Cloud Container Attack Tool (CCAT) is a tool for testing security of container environments.

Cloud-related research releases from the Rhino Security Labs team.

A collection of slides, videos, and proof-of-concept scripts from various Rhino presentations.

Utility for downloading and mounting EBS snapshots using the EBS Direct API's