Screenshots

Example Usage

pip install kosty

# Full audit — cost + security across 30 services
kosty audit --output all

# External attack surface mapping
kosty public-exposure --output console

# IAM privilege escalation detection (21 patterns)
kosty iam check-privilege-escalation --deep

# Organization-wide scan
kosty audit --organization --max-workers 20 --output all

See also

WADComs.github.io

Open Source

WADComs is an interactive cheat sheet, containing a curated list of offensive security tools and the…

Active-Directory-Exploitation-Cheat-Sheet

Open Source

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.…

LOLBAS

Open Source

Living Off The Land Binaries And Scripts — documents Windows native binaries that can be abused for …

metarget

Open Source

Metarget is a framework providing automatic constructions of vulnerable infrastructures.…

deepce

Open Source

Docker Enumeration, Escalation of Privileges and Container Escapes (DEEPCE)…

A-Red-Teamer-diaries

Free

RedTeam/Pentest notes and experiments tested on several infrastructures related to professional enga…