69 matches found
nuvola
nuvola nuvola（小写 n）是一款工具，用于转储 AWS 环境配置和服务，并利用预定义、可扩展的自定义规则（通过简单 Yaml 语法创建）执行自动和手动安全分析。 该项目背后的核心理念是为云平台创建一个抽象的数字化孪生。举个更具体的例子：nuvola 借鉴了用于 Active Directory 分析的 BloodHound 特性，但应用于云环境（目前仅限 AWS）。 使用图数据库还增加了发现不同创新攻击路径的可能性，并可将其用作离线、集中且轻量级的数字化孪生。 快速开始 前提条件 已安装 docker-compose 配置了与 awscli 配合使用的 AWS...
aws-security-assessment-solution
Soluções de Avaliação de Segurança Self-Service v2.0 A cibersegurança continua a ser um tópico muito importante e uma preocupação para muitos CIOs, CISOs e seus clientes. Para atender a essas preocupações importantes, a AWS desenvolveu um conjunto principal de serviços que os clientes devem usar...
terraform-aws-secure-baseline
terraform-aws-secure-baseline Terraform Module Registry Un modulo Terraform per configurare il tuo account AWS con una baseline di configurazione ragionevolmente sicura. La maggior parte delle configurazioni si basa su CIS Amazon Web Services Foundations v1.4.0 e AWS Foundational Security Best...
aws-perimeter
aws-perimeter Ein terminalbasierter AWS-Sicherheitsscanner mit 100+ Sicherheitsprüfungen in den Bereichen VPC, IAM, S3, CloudTrail, Container ECS/EKS und KI-Angriffserkennung. Erkennt gefährliche IAM-Berechtigungen, offengelegte Geheimnisse, falsch konfigurierte S3-Buckets, Containerschwachstelle...
cloudmapper
CloudMapper Nota la funzionalità Network Visualization comando prepare non è più mantenuta. CloudMapper ti aiuta ad analizzare i tuoi ambienti Amazon Web Services AWS. Lo scopo originale era generare diagrammi di rete e mostrarli nel tuo browser funzionalità non più mantenuta. Ora contiene molte...
drs-malware-scan
Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...
aws-security-assessment-solution
Self-Service Security Assessment Solutions v2.0 Cybersecurity remains a very important topic and point of concern for many CIOs, CISOs, and their customers. To meet these important concerns, AWS has developed a primary set of services customers should use to aid in protecting their accounts. Amaz...
metahub
MetaHub è uno strumento automatico di arricchimento contestuale delle scoperte di sicurezza e di valutazione dell'impatto per la gestione delle vulnerabilità. Puoi usarlo con AWS Security Hub o qualsiasi scanner di sicurezza compatibile con ASFF. Smetti di fare affidamento su gravità inutili e...
metahub
MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management. You can use it with AWS Security Hub or any ASFF-compatible security scanner. Stop relying on useless severities and switch to impact scoring definitions based on YOUR context...
terraform-aws-security-group
terraform-aws-security-group Modulo Terraform per gestire i Security Group AWS. Attualmente, le regole di ingresso e uscita supportano IPv4, IPv6 e ID del Security Group. Requisiti...
Awesome-CloudSec-Labs
Großartige Cloud-Sicherheits-Labore Eine Liste kostenloser cloudnativer Sicherheits-Lernlabore. Enthält CTF, selbst gehostete Workshops, geführte Schwachstellen-Labore und Forschungslabore. Sortiert nach Technologie und Kategorie Name| Technologie| Kategorie| Autor| Notizen ---|---|---|---|--- Th...
Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1693)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1693 advisory. In the Linux kernel, the following vulnerability has been resolved: afunix: Give up GC if MSGPEEK intervened. CVE-2026-23394 In the Linux kernel, the following vulnerability has been resolved:...
AWS-LC X.509 Name Constraints Bypass via Wildcard/Unicode CN
Summary AWS-LC is an open-source, general-purpose cryptographic library. Impact A logic error in CN Common Name validation allows certificates with wildcard or raw UTF-8 Unicode CN values to bypass name constraints enforcement. The cn2dnsid function does not recognize these CN patterns as valid D...
CVE-2024-41178
Exposure of temporary credentials in logs in Apache Arrow Rust Object Store objectstore crate, version 0.10.1 and earlier on all platforms using AWS WebIdentityTokens. On certain error conditions, the logs may contain the OIDC token passed to AssumeRoleWithWebIdentity...
BIT-CILIUM-OPERATOR-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...
EUVD-2025-199886
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...
CVE-2025-64715 Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network...
EUVD-2023-1355
Malicious code in bioql PyPI...
payloadsallthethings
This is an offensive tool for AWS exploitation. The repository contains a collection of tools and scripts for testing the security of Amazon Web Services AWS environments. The tools include: Pacu: an AWS exploitation framework designed for testing the security of AWS environments Bucket Finder: a...
