checkov

...

cred_scanner

credscanner 一个简单的命令行工具，用于查找文件中的AWS凭证。针对Jenkins和其他CI系统进行了优化。 我怀疑市面上还有其他更好的工具（例如 git-secrets），但我找不到能快速进行粗略扫描且与Jenkins良好集成的工具。 用法： 要安装，只需将其复制到你想要的位置并安装依赖项： root@kitploit: pip install -r ./requirements.txt 此工具基于 Python 3.6 编写。 运行方式： root@kitploit: python credscanner.py...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

festin

FestIN——强大的S3存储桶发现与内容探测工具 什么是FestIn 为什么选择FestIn 安装 使用Python 使用Docker 完整选项 用法 配置搜索域名 并发 HTTP爬取配置 管理结果 代理使用 DNS选项 全文搜索支持 作为服务运行（监控模式） 示例：结合FestIn与DnsRecon 步骤1 - 使用所需选项对目标域名运行dnsrecon并保存输出 步骤2 - 准备上一步生成的文件以供FestIn使用 步骤3 - 使用所需选项运行FestIn并保存输出 -...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

CVE-2026-44578

CVE-2026-44578 — Next.js WebSocket 升级 SSRF 预认证的服务端请求伪造漏洞，影响 Next.js 自托管部署。 通过单个精心构造的 HTTP 请求即可从 localhost:80 提取 AWS 凭证、密钥及内部服务数据。 字段| 值 ---|--- CVE| CVE-2026-44578 GHSA| GHSA-c4j6-fc7j-m34r CVSS 3.1| 8.6 高危 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N 类型| SSRF CWE-918 受影响版本| Next.js 13.4.13 – 15.5.15,...

slurp-1

slurp 黑盒/白盒 S3 存储桶枚举器 概述 感谢所有使此工具成为可能的供应商软件包。 这是一个安全工具；专为渗透测试人员和安全专业人员设计，用于审计 S3 存储桶。 功能 通过域名进行扫描；您可以针对单个域名或域名列表 通过关键词进行扫描；您可以针对单个关键词或关键词列表 通过 AWS 凭证进行扫描；您可以针对自己的 AWS 账户查看哪些存储桶已暴露 彩色输出，便于可视化 grep 目前每个域名和关键词生成超过 28,000 种排列组合（感谢 @jakewarren 和 @random-robbie） Punycode 支持国际化域名 强版权保护许可证（GPLv3） 模式...

CVE-2026-79916

MaxKB is an open-source enterprise AI assistant. Prior to 2.10.5-lts , authenticated workspace members can inject control characters into the AWS Bedrock access_key_id and secret_access_key fields. The _update_aws_credentials function writes these values to /root/.aws/credentials without safe par...

CVE-2026-54356

CVE-2026-54356 — Budibase: emisión autenticada de URL de carga firmada de S3 arbitraria Un usuario autenticado de bajo privilegio rol BASIC de un espacio de trabajo de Budibase publicado puede llamar a POST /api/attachments/:datasourceId/url y obtener una URL de carga pre-firmada de S3 firmada co...

cve-2013-4660_PoC

Docker 构建 构建为具有漏洞环境的 Docker 环境。 docker build -f cve-2013-4660 -t cve-2013-4660 . 为了演示攻击成功时服务器内部敏感信息如何泄露，注入虚拟数据库和虚拟数据库密码以及 AWS 密钥后运行容器。 sudo docker run -d --name yaml-lab -e DBPASSWORD="SuperSecretPassword123!" -e AWSACCESSKEYID="AKIAIOSFODNN7EXAMPLE" cve-2013-4660-test 将 PoC.yaml 文件复制到 Docker 容器内...

PYSEC-2026-3918 Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default

Problem Scrapy’s S3DownloadHandler sends signed S3 requests over plaintext HTTP by default. A normal request like s3://bucket/key is converted into http://bucket.s3.amazonaws.com/key unless request.meta"issecure" is explicitly set. The generated request is then signed with configured AWS...

Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default

ProblemScrapy’s S3DownloadHandler sends signed S3 requests over plaintext HTTP by default.A normal request like s3://bucket/key is converted into http://bucket.s3.amazonaws.com/key unless request.meta"issecure" is explicitly set. The generated request is then signed with configured AWS credential...

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

JetBrains is urging Cadence users to revoke and rotate all credentials following a security incident last month in which unidentified threat actors exploited a recently disclosed critical vulnerability in TeamCity to breach its own environment. "Cadence users should immediately revoke or rotate a...

GHSA-76G3-C3X4-CRVX Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default

Problem Scrapy’s S3DownloadHandler sends signed S3 requests over plaintext HTTP by default. A normal request like s3://bucket/key is converted into http://bucket.s3.amazonaws.com/key unless request.meta"issecure" is explicitly set. The generated request is then signed with configured AWS...

Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default

Problem Scrapy’s S3DownloadHandler sends signed S3 requests over plaintext HTTP by default. A normal request like s3://bucket/key is converted into http://bucket.s3.amazonaws.com/key unless request.meta"issecure" is explicitly set. The generated request is then signed with configured AWS...

CVE-2026-84366

Scrapy is a high-level web crawling and scraping framework for Python. Prior to 2.17.0, in scrapy/core/downloader/handlers/s3.py, Scrapy's S3DownloadHandler converts an S3-scheme bucket and key request into a plaintext HTTP request to the corresponding S3 endpoint unless request.meta"issecure" is...

PT-2026-84504

Name of the Vulnerable Software and Affected Versions Scrapy versions prior to 2.17.0 Description The S3DownloadHandler in scrapy/core/downloader/handlers/s3.py converts S3-scheme bucket and key requests into plaintext HTTP requests unless the is secure variable in request.meta is explicitly...

ANT-2026-W77T9B29 · supabase/postgres · other

other medium Severity Claude medium · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-W77T9B29: CI downloads unverified binary then assumes production AWS role The qemu-image-build GitHub Actions...

Malicious code in @servicetitan/measure-sheet-data (npm)

npm/@servicetitan/measure-sheet-data is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized an...