badsecrets

badsecrets Una libreria pura Python per identificare l'uso di segreti crittografici noti o molto deboli su diverse piattaforme. Il progetto è pensato sia come repository di vari "segreti noti" ad esempio, chiavi ASP.NET machine keys trovate negli esempi dei tutorial, sia per fornire un livello di...

Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to Targets

The Initial Access Broker IAB known as Gold Melody has been attributed to a campaign that exploits leaked ASP.NET machine keys to obtain unauthorized access to organizations and peddle that access to other threat actors. The activity is being tracked by Palo Alto Networks Unit 42 under the monike...

Microsoft Identifies 3,000 Leaked ASP.NET Keys Enabling Code Injection Attacks

Microsoft is warning of an insecure practice wherein software developers are incorporating publicly disclosed ASP.NET machine keys from publicly accessible resources, thereby putting their applications in attackers' pathway. The tech giant's threat intelligence team said it observed limited...