badsecrets

badsecrets Eine reine Python-Bibliothek zur Identifizierung der Verwendung bekannter oder sehr schwacher kryptografischer Geheimnisse auf einer Vielzahl von Plattformen. Das Projekt ist als Repository für verschiedene "bekannte Geheimnisse" z. B. ASP.NET-Maschinenkeys aus Beispielen in Tutorials...

crapsecrets

Originalmente bifurcado do badsecrets 0.7.0 Sincronizado ocasionalmente até março de 2025! Desatualizado, com alguns módulos e casos de teste desatualizados! Bom para testar Machine Keys comprometidas do ASP.NET! Isto é CrapBadSecrets mkdir -p /ctools/ cd /ctools/ git clone...

Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to Targets

The Initial Access Broker IAB known as Gold Melody has been attributed to a campaign that exploits leaked ASP.NET machine keys to obtain unauthorized access to organizations and peddle that access to other threat actors. The activity is being tracked by Palo Alto Networks Unit 42 under the monike...

Microsoft Identifies 3,000 Leaked ASP.NET Keys Enabling Code Injection Attacks

Microsoft is warning of an insecure practice wherein software developers are incorporating publicly disclosed ASP.NET machine keys from publicly accessible resources, thereby putting their applications in attackers' pathway. The tech giant's threat intelligence team said it observed limited...