Cred Scanner - A Simple File-Based Scanner To Look For Potential AWS Access And Secret Keys In Files

A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkins. Usage: To...

Scout2 - Security Auditing Tool For AWS Environments

Scout2 is a security tool that lets AWS administrators assess their environment's security posture. Using the AWS API, Scout2 gathers configuration data for manual inspection and highlights high-risk areas automatically. Rather than pouring through dozens of pages on the web, Scout2 supplies a...

HOWTO: Prevent your AWS credentials and other secrets from being exposed in code repositories

Uber had AWS credentials exposed on GitHub. As thousands of other companies do. It has been known for a while that nuggets such as private keys and credentials can be found with the GitHub search functionality or with Google dorks so looking for sensitive information in GitHub repositories is not...

Smiled - Moments and Rewards - AWS Credentials, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Smiled - Moments and Rewards published at the 'play' market has multiple vulnerabilities...

Live.me - #1 video chat app - AWS Credentials, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Live.me - 1 video chat app published at the 'play' market has multiple vulnerabilities...

IFTTT - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application IFTTT published at the 'play' market has multiple vulnerabilities...

BZWBK24 mobile - AWS Credentials, Customized SSL, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application BZWBK24 mobile published at the 'play' market has multiple vulnerabilities...

Red Stamp Cards - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Red Stamp Cards published at the 'play' market has multiple vulnerabilities...

██████: AWS Credentials leaked: access to production database backups, SSL certs and more

I found a public accessible Jenkins instance: https://██████jenkins.██████.com This instance requires login, however, it is possible to register an account using the signup page: https://██████jenkins.██████.com/signup Arbitrary file reads From there it is possible to use the Jenkins Script Conso...

AWS OpenVPN Deployment Tool: AutoVPN

AWS OpenVPN Deployment Tool Dependencies: boto and paramiko python packages and aws .credentials file on system 1. Clone repo to system. 2. Execute autovpn with -C -k and -r options to deploy to AWS ./autovpn -C -r us-east-1 -k macbook 3. OpenVPN config files are downloaded to current working...

Automated Malware Incident Response & Analysis: AMIRA

Automated Malware Incident Response & Analysis AMIRA is a service for automatically running the analysis on the OSXCollector output files. The automated analysis is performed via OSXCollector Output Filters, in particular The One Filter to Rule Them All : the Analyze Filter. AMIRA takes care of...

Sky Plus Estonia - AWS Credentials, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Sky Plus Estonia published at the 'play' market has multiple vulnerabilities...

Nobby - AWS Credentials, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Nobby published at the 'play' market has multiple vulnerabilities...

PBS KIDS Party - AWS Credentials, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application PBS KIDS Party published at the 'play' market has multiple vulnerabilities...

Baby Sign and Sing Lite - AWS Credentials, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Baby Sign and Sing Lite published at the 'play' market has multiple vulnerabilities...

Pango FREE - AWS Credentials, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Pango FREE published at the 'play' market has multiple vulnerabilities...

Trucktown: Scrap Yard Scramble - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Trucktown: Scrap Yard Scramble published at the 'play' market has multiple vulnerabilities...

Psych! Outwit Your Friends - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Psych! Outwit Your Friends published at the 'play' market has multiple vulnerabilities...

Dropwords - AWS Credentials, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dropwords published at the 'play' market has multiple vulnerabilities...

WordBuzz: The Honey Quest - AWS Credentials, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application WordBuzz: The Honey Quest published at the 'play' market has multiple vulnerabilities...