Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Badsecrets - A Library For Detecting Known Secrets Across Many Web Frameworks

🗓️ 07 Jul 2023 12:30:00Reported by KitPloitType 
kitploit
 kitploit🔗 www.kitploit.com👁 81 Views

A python library for identifying known or weak cryptographic secrets across various platforms, providing a language-agnostic way to detect their use. Includes checks for ASP.NET machine keys, Telerik UI, Flask signed cookies, Peoplesoft PS_TOKEN, Django session cookies, Ruby on Rails, generic JWT, Java Server Faces, Symfony, Express.js, and Laravel cookies

Related
Refs
ReporterTitlePublishedViews
Family
GithubExploit		Exploit for Inadequate Encryption Strength in Telerik Ui_For_Asp.Net_Ajax
9 Jan 201813:53
–githubexploit
GithubExploit		Exploit for Deserialization of Untrusted Data in Telerik Ui_For_Asp.Net_Ajax
29 May 202007:29
–githubexploit
ICS		Iranian Advanced Persistent Threat Actors Threaten Election-Related Systems
22 Oct 202012:00
–ics
ICS		Threat Actors Exploit Progress Telerik Vulnerabilities in Multiple U.S. Government IIS Servers
15 Jun 202312:00
–ics
ICS		Hitachi ABB Power Grids eSOMS Telerik
18 Mar 202100:00
–ics
ATTACKERKB		CVE-2017-9248
3 Jul 201700:00
–attackerkb
BDU FSTEC		The vulnerability of the Telerik.Web.UI.dll library of the Telerik UI software for ASP.NET AJAX and the Sitefinity web content management system allows a attacker to exploit the encryption keys (Telerik.Web.UI.DialogParametersEncryptionKey and/or MachineKey).
7 Sep 202100:00
–bdu_fstec
Circl		CVE-2017-9248
21 Mar 201813:35
–circl
CISA KEV Catalog		Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability
3 Nov 202100:00
–cisa_kev
CISA		 CISA, FBI, and MS-ISAC Update Joint CSA on Progress Telerik Vulnerabilities
15 Jun 202312:00
–cisa
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
07 Jul 2023 12:30Current
9.8High risk
Vulners AI Score9.8
CVSS 27.5
CVSS 3.19.8
EPSS0.75098
python librarycryptographic secretsasp.nettelerik uiflaskpeoplesoftdjangoruby on railsjwtjava server facessymfonyexpress.jslaravel
81