Ninja

Quick Update to include Follina Exploitation 01/06/2022 - NinjaC2 will generate the document and serve the HTML payload . More information : https://www.linkedin.com/posts/ahmed-khlief-499321a7i-just-pushed-a-quick-update-to-ninjac2-to-activity-6937661951007170560-Tmps Ninja V2.2 Released...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

barq

barq barq: The AWS Cloud Post Exploitation framework! What is it? barq is a post-exploitation framework that allows you to easily perform attacks on a running AWS infrastructure. It allows you to attack running EC2 instances without having the original instance SSH keypairs. It also allows you to...

CVE-2021-3456

CVE-2021-3456 A practical chain that starts with an innocuous PDF file and ends up in a reverse shell on an AWS EC2 instance The Beginning: Crafting a PDF Payload It all begins on the front end of the attack. Using PowerShell’s built‑in WScript object we embed a script inside a PDF that will be...

metabadger

Metabadger Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 IMDSv2. Metabadger Purpose and functionality Diagnose and evaluate your current usage of the AWS Instance Metadata Service along with understanding how the service works Prepare you t...

CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-kinesis, grafana, nuclei, crossplane-provider-aws-cloudfront, crossplane-provider-aws-kms, terraform-provider-grafana, crossplane-provider-aws-firehose, crossplane-provider-aws-cloudwatchlogs, kubevela,...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-kinesis, grafana, nuclei, crossplane-provider-aws-cloudfront, crossplane-provider-aws-kms, terraform-provider-grafana, crossplane-provider-aws-firehose, crossplane-provider-aws-cloudwatchlogs, kubevela,...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-kinesis, grafana, nuclei, crossplane-provider-aws-cloudfront, crossplane-provider-aws-kms, terraform-provider-grafana, crossplane-provider-aws-firehose, crossplane-provider-aws-cloudwatchlogs, kubevela,...

GHSA-FH4F-47MF-F2GJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-kinesis, grafana, nuclei, crossplane-provider-aws-cloudfront, crossplane-provider-aws-kms, terraform-provider-grafana, crossplane-provider-aws-firehose, crossplane-provider-aws-cloudwatchlogs, kubevela,...

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-kinesis, grafana, nuclei, crossplane-provider-aws-cloudfront, crossplane-provider-aws-kms, terraform-provider-grafana, crossplane-provider-aws-firehose, crossplane-provider-aws-cloudwatchlogs, kubevela,...

CVE-2026-100347 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-authorization, crossplane-provider-aws-kinesis, grafana, nuclei, crossplane-provider-aws-cloudfront, crossplane-provider-aws-kms, terraform-provider-grafana, crossplane-provider-aws-firehose, crossplane-provider-aws-cloudwatchlogs, kubevela,...

cloud

Cloud Monitoreando el Panorama de la Nube Nuestra misión con este proyecto es ofrecer un mapa siempre actualizado y de libre acceso del panorama de la nube para cada uno de los principales proveedores de servicios en la nube. Decidimos comenzar recolectando datos de certificados SSL de máquinas A...

autovpn

!CAUTION Este repositorio ya no se mantiene. No se proporcionarán más actualizaciones, correcciones de errores ni soporte. Utilice la nueva versión https://github.com/ttlequals0/autowire Resumen Script que permite la creación sencilla de puntos finales OpenVPN en cualquier región de AWS. Para cre...

metabadger

Metabadger Previene ataques SSRF en AWS EC2 mediante actualizaciones automatizadas al más seguro Servicio de Metadatos de Instancia v2 IMDSv2. Metabadger Propósito y funcionalidad Diagnosticar y evaluar tu uso actual del Servicio de Metadatos de Instancia de AWS, además de entender cómo funciona ...

Malicious code in @hrmony/kit-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6ac778d35433101385eb57755b6079e76c7bb3dc40306218cf5b1295d5a853 The package runs credential-harvesting code both at install time and at import time. The declared preinstall hook scripts/check-setup.mjs queries the...

MAL-2026-17258 Malicious code in @hrmony/cdk-constructs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6601c44353f60d117ef4e1ea09f9d2c997cde4375af70c49c628b38db8f1b55a On require/import, index.js executes top-level async code that harvests AWS EC2 instance metadata via IMDSv2 including IAM role security credentials...

Malicious code in @hrmony/cdk-constructs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6601c44353f60d117ef4e1ea09f9d2c997cde4375af70c49c628b38db8f1b55a On require/import, index.js executes top-level async code that harvests AWS EC2 instance metadata via IMDSv2 including IAM role security credentials...

MAL-2026-17256 Malicious code in @hrmony/benefit-sachbezug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de40a55476bbcc5eda275f9f385396699f1b066bf1ddedb80fad053c4057c63a The package's main entry index.js executes at require/import time and POSTs harvested data to the hardcoded endpoint...

Malicious code in @hrmony/pladddform-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 607004ff93f1fcd5fbf7b1cf6b5e104b7f26eb699aee3dd4f8bbb33494f0b096 On module import, index.js executes an unconditional exfiltration payload against the installer/runtime host. It queries the AWS EC2 Instance Metadat...

MAL-2026-17252 Malicious code in @hrmony/belegerfassung-pladddform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 615255a66c44204b03e60a165c1a9b21f95ecd351bf58c355462c159c74d1017 The package's main module index.js executes exfiltration logic at top level on import. It first sends a hello beacon via HTTP POST to the hardcoded...