metlo

Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...

log4j-vulnerable-app-cve-2021-44228-terraform

log4j-vulnerable-app-cve-2021-44228-terraform 一个用于部署易受攻击应用及配合 CVE-2021-44228 使用的 JNDIExploit 的 Terraform 配置 关于技术栈 该 Terraform 在 AWS 云的一个 VPC 中创建两个实例。 你只需要导出你的 AWSACCESSKEYID 和 AWSSECRETACCESSKEY 其中一个实例是 JNDIExploit。 另一个是用于 log4j 漏洞利用的 Vulnerable-App 请在 apply 之前替换 terraform 中的 SSH 公钥 root@kitploit...

MozDef

MozDef: ⚠️ 弃用通知 ⚠️ Mozilla 不再维护 Mozilla 企业防御平台（MozDef）项目。 请 fork 该项目以继续开发。 文档： https://mozdef.readthedocs.org/en/latest/ 在 AWS 上尝试 MozDef： 以下按钮将在您的 AWS 账户中启动 Mozilla 企业防御平台。 警告： 点击“启动堆栈”按钮并完成部署将产生 AWS 账户费用。 为什么？ MozDef 的灵感来源于攻击者可利用的大量工具集。像 metasploit、armitage、lair、dradis...

lowkey

在 AWS 上自托管 AI 编码代理 — OpenClaw, Claude Code, Codex, Kiro, NemoClaw, Hermes ▶️ 在 YouTube 上观看完整演示 📝 阅读博客文章：我给代理开了个 AWS 账号，它就能编码、部署和调试全栈应用了 简而言之 — 部署 Lowkey： root@kitploit: curl -sfL install.lowkey.run | bash 适用于 bash 、zsh 和 AWS CloudShell 。安装程序会交互式地引导你选择 pack、profile 和部署方法。 一行命令示例（非交互式）：...

DVSA

一个脆弱的无服务器应用（DVSA） Damn Vulnerable Serverless Application DVSA 是一个故意设计为脆弱的应用程序，旨在帮助安全专业人员在合法环境中测试其技能和工具，帮助开发者更好地理解保护无服务器应用的过程，并帮助学生和教师在受控的课堂环境中学习无服务器应用安全。 DVSA 的目标是 练习一些最常见的无服务器漏洞 ，并提供一个简单直观的界面。 请注意，该软件同时包含 已记录和未记录的漏洞 。这是有意为之。我们鼓励您尝试发现尽可能多的问题。 免责声明 请勿在生产账户上安装 DVSA...

EUVD-2024-36563

Malicious code in bioql PyPI...

CVE-2024-37293

The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...

CVE-2024-37293

The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...

CVE-2024-37293 aws-deployment-framework's potential risk can lead to privilege escalation

The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...

CVE-2024-37293 aws-deployment-framework's potential risk can lead to privilege escalation

The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...

CVE-2024-37293

The CVE concerns the AWS Deployment Framework (ADF) bootstrap process. Prior to v4.0.0, the bootstrap CodeBuild role could call sts:AssumeRole without restrictions, enabling escalation to any AWS account in the organization with elevated privileges. Patches are included in aws-deployment-framewor...

CVE-2024-37293 aws-deployment-framework's potential risk can lead to privilege escalation

The AWS Deployment Framework ADF is a framework to manage and deploy resources across multiple AWS accounts and regions within an AWS Organization. ADF allows for staged, parallel, multi-account, cross-region deployments of applications or resources via the structure defined in AWS Organizations...

Amazon AWS Deployment Framework Security Vulnerability

Amazon AWS Deployment Framework is a broad and flexible framework from Amazon.com, Inc. for managing and deploying resources across multiple AWS accounts and regions within an AWS organization. A security vulnerability exists in Amazon AWS Deployment Framework versions prior to 4.0.0 that stems...

Cloud Template Tool – The only way for Imperva On-Premises deployment on AWS

For the last six years, Imperva’s customers have been able to deploy our On-Premises product on AWS and enjoy the many advantages of cloud deployment including flexibility, cost-effectiveness, scalability, accessibility and many others. But using Imperva On-Premises on AWS wasn’t always easy, and...