69 matches found
cloudmapper
CloudMapper Nota la funzionalità Network Visualization comando prepare non è più mantenuta. CloudMapper ti aiuta ad analizzare i tuoi ambienti Amazon Web Services AWS. Lo scopo originale era generare diagrammi di rete e mostrarli nel tuo browser funzionalità non più mantenuta. Ora contiene molte...
aws-perimeter
aws-perimeter Ein terminalbasierter AWS-Sicherheitsscanner mit 100+ Sicherheitsprüfungen in den Bereichen VPC, IAM, S3, CloudTrail, Container ECS/EKS und KI-Angriffserkennung. Erkennt gefährliche IAM-Berechtigungen, offengelegte Geheimnisse, falsch konfigurierte S3-Buckets, Containerschwachstelle...
nuvola
nuvola nuvola con la n minuscola è uno strumento per eseguire dump e analisi di sicurezza automatiche e manuali su configurazioni e servizi di ambienti AWS utilizzando regole predefinite, estensibili e personalizzate create con una sintassi Yaml semplice. L'idea generale alla base di questo...
aws-security-assessment-solution
Soluzioni di Valutazione della Sicurezza Self-Service v2.0 La cybersecurity rimane un argomento molto importante e un punto di preoccupazione per molti CIO, CISO e i loro clienti. Per affrontare queste importanti preoccupazioni, AWS ha sviluppato un set primario di servizi che i clienti dovrebber...
terraform-aws-secure-baseline
terraform-aws-secure-baseline Registro de Módulos do Terraform Um módulo do Terraform para configurar sua conta AWS com uma linha de base de configuração razoavelmente segura. A maioria das configurações é baseada no CIS Amazon Web Services Foundations v1.4.0 e no AWS Foundational Security Best...
drs-malware-scan
Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...
aws-security-assessment-solution
Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...
metahub
MetaHub è uno strumento automatico di arricchimento contestuale delle scoperte di sicurezza e di valutazione dell'impatto per la gestione delle vulnerabilità. Puoi usarlo con AWS Security Hub o qualsiasi scanner di sicurezza compatibile con ASFF. Smetti di fare affidamento su gravità inutili e...
metahub
MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management. You can use it with AWS Security Hub or any ASFF-compatible security scanner. Stop relying on useless severities and switch to impact scoring definitions based on YOUR context...
terraform-aws-security-group
terraform-aws-security-group Modulo Terraform per gestire i Security Group AWS. Attualmente, le regole di ingresso e uscita supportano IPv4, IPv6 e ID del Security Group. Requisiti...
Awesome-CloudSec-Labs
Großartige Cloud-Sicherheits-Labore Eine Liste kostenloser cloudnativer Sicherheits-Lernlabore. Enthält CTF, selbst gehostete Workshops, geführte Schwachstellen-Labore und Forschungslabore. Sortiert nach Technologie und Kategorie Name| Technologie| Kategorie| Autor| Notizen ---|---|---|---|--- Th...
Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1693)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1693 advisory. In the Linux kernel, the following vulnerability has been resolved: afunix: Give up GC if MSGPEEK intervened. CVE-2026-23394 In the Linux kernel, the following vulnerability has been resolved:...
AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
Summary AWS-LC is an open-source, general-purpose cryptographic library. Impact A logic error in CN Common Name validation allows certificates with wildcard or raw UTF-8 Unicode CN values to bypass name constraints enforcement. The cn2dnsid function does not recognize these CN patterns as valid D...
CVE-2024-41178
Exposure of temporary credentials in logs in Apache Arrow Rust Object Store objectstore crate, version 0.10.1 and earlier on all platforms using AWS WebIdentityTokens. On certain error conditions, the logs may contain the OIDC token passed to AssumeRoleWithWebIdentity...
BIT-CILIUM-OPERATOR-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...
EUVD-2025-199886
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...
CVE-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...
EUVD-2023-1355
Malicious code in bioql PyPI...
payloadsallthethings
This is an offensive tool for AWS exploitation. The repository contains a collection of tools and scripts for testing the security of Amazon Web Services AWS environments. The tools include: Pacu: an AWS exploitation framework designed for testing the security of AWS environments Bucket Finder: a...
