
DVSA
a Damn Vulnerable Serverless Application

a Damn Vulnerable Serverless Application

A tool to extract the IdP cert from vCenter backups and log in as Administrator

Python script to bypass Azure APIM signup when UI is disabled, this is different from the CVE-2025-66390 as it does not require you to setup anything…

Automates migration of AWS workloads from IMDSv1 to IMDSv2 to mitigate SSRF attacks. Detects IMDSv1 usage across EC2, ECS, EKS, Lightsail, and more,…

Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 (IMDSv2).

AzureGoat : A Damn Vulnerable Azure Infrastructure

GCPGoat : A Damn Vulnerable GCP Infrastructure

A Terraform to deploy vulnerable app and a JDNIExploit to work with CVE-2021-44228

Poc for CVE 2023 5044