Detect .dockercfg

Docker registry authentication data !/usr/bin/env python3 -- coding: utf-8 -- """Docker registry authentication data.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect .dockercfg', 'description': 'Docker registr...

Whispers - Identify Hardcoded Secrets In Static Structured Text

"My little birds are everywhere, even in the North, they whisper to me the strangest stories." - Lord Varys Whispers is a static code analysis tool designed for parsing various common data formats in search of hardcoded credentials and dangerous functions. Whispers can run in the CLI or you can...

GO-2021-0066 Sensitive information leak via log file in k8s.io/kubernetes

Attempting to read a malformed .dockercfg may cause secrets to be inappropriately logged...