Meshery, the cloud native manager

[WIP] Resources for AI engineers. Also contains supporting materials for the book AI Engineering (Chip Huyen, 2025)

LLM | Security | Operations in one github repo with good links and pictures.

Damn Vulnerable Kubernetes App (DVKA) is a series of apps deployed on Kubernetes that are damn vulnerable.

Reference notes for Attacking and Defending Generative AI presentation

Get Started with Kubernetes

CNAPPgoat is an open source project designed to modularly provision vulnerable-by-design components in cloud environments.

A PowerShell tool that takes strong inspiration from CrackMapExec.

Technical notes, AD pentest methodology, list of tools, scripts and Windows commands that I find useful during internal penetration tests

BChecks collection for Burp Suite Professional

Parse and Process AWS IAM Policies, Statements, ARNs, and wildcards.

A collection of AWS penetration testing junk

ChatGPT in terminal without needing API keys

RCE exploit for CVE-2023-3519

CloudMapper helps you analyze your Amazon Web Services (AWS) environments.

A fast port scanner written in go with a focus on reliability and simplicity. Designed to be used in combination with other tools for attack surface discovery in bug bounties and pentests

evilginx3 + gophish

automatically tests prompt injection attacks on ChatGPT instances

Least privilege AWS IAM Terraformer

A static blog/portfolio website built using Hugo.

Red Teaming and Penetration Testing Checklist, Cheatsheet, Clickscript

Send phishing messages and attachments to Microsoft Teams users

This project contains all the EICAR files needed to test if a web application has a Virus sandboxing mechanism.

Work in progress...

A keystroke logger targeting the Remote Desktop Protocol (RDP) related processes, It utilizes a low-level keyboard input hook, allowing it to record keystrokes in certain contexts (like in mstsc.ex…

Automating situational awareness for cloud penetration tests.

Create your own vulnerable by design AWS penetration testing playground

Active Directory Penetration Testing for Red Teams