awswaf

Solucionador de AWS WAF Amazon Web Services Web Application Firewall Resumen Este proyecto proporciona un solucionador basado en Golang y Python para el desafío de AWS WAF. Soporta tanto el tipo "token" / "Invisible" como el tipo "Captcha" usando gemini ⭐️ Muestra tu apoyo Por favor, da estrella a...

tf-log4j-aws-poc

Readme Project Description This project files demostrate a proof-of-concept of log4j vulnerability CVE-2021-44228 on AWS using Terraform Infrastructure-as-a-code means. There are 2 demo in this project: 1. single-instance contains a vulnerable server, you can use your personal computer to exploit...

Grammarly fixed XSS vulnerability that bypasses AWS WAF

Grammarly is the unicorn company that announced its open bug bounty program last September. Since that time, many security researchers posted their submissions and got paid well. Some of Grammarlys issues are also useful for others. Like the recent XSS, that also bypasses an AWS WAF. The recent X...

AWS Security Hub and Deep Security

One of the biggest challenges in maintaining your security posture is visibility. You have security controls deployed throughout the stack, and each fo these tools is generating its own set of data points and has its own view of your deployment. Managing the multitude of alerts and events from...