domain-protect

domain-protect Domain Protect is now an OWASP project moved to: github.com/domain-protect/domain-protect...

CVE-2025-49844-discovery

ElastiCache Redis/Valkey Netzwerkanalyse-Tools Skripte zur Prüfung von AWS ElastiCache Redis- und Valkey-Clustern auf Netzwerkexposition. Voraussetzungen AWS CLI mit entsprechenden Anmeldeinformationen konfiguriert jq installiert: brew install jq Skripte list-elasticache-clusters.sh Listet alle...

kata-containers

Kata Containers Welcome to Kata Containers! This repository is the home of the Kata Containers code for the 2.0 and newer releases. If you want to learn about Kata Containers, visit the main Kata Containers website. Introduction Kata Containers is an open source project and community working to...

cloudgpt

CloudGPT Scanner di vulnerabilità AWS Analizza le policy AWS gestite dal cliente per individuare vulnerabilità utilizzando ChatGPT. Questo strumento redige automaticamente il numero dell'account cliente sostituendolo con un numero di account generato casualmente prima di inviare le policy a...

Anyscale Ray 2.6.3 and 2.8.0 - Server-Side Request Forgery

The Ray Dashboard API is affected by a Server-Side Request Forgery SSRF vulnerability in the url parameter of the /logproxy API endpoint. The API does not perform sufficient input validation within the affected parameter and any HTTP or HTTPS URLs are accepted as valid. id: CVE-2023-48023 info:...

Strapi Versions <=4.5.6 - Authentication Bypass

Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for authentication. A remote attacker could forge an ID token that is signed using the 'None' type algorithm to bypass authentication and impersonate any user that...

canarytokens

Canarytokens Thinkst Applied Research द्वारा अवलोकन Canarytokens आपके नेटवर्क पर गतिविधि और क्रियाओं को ट्रैक करने में मदद करते हैं। यदि आपको कोई समस्या आती है तो कृपया हमारा FAQ यहाँ देखें, या एक issue बनाएं और हम जल्द से जल्द आपसे संपर्क करने का प्रयास करेंगे। विषय-सूची आचार संहिता अप्रचलन...

IPSpinner

🔁 IPSpinner IPSpinner एक स्थानीय प्रॉक्सी है जिसका उपयोग सभी आने वाले अनुरोधों को विभिन्न चयनित प्रदाताओं के माध्यम से पुनर्निर्देशित करने के लिए किया जा सकता है। इसका उद्देश्य एक पास-थ्रू प्रॉक्सी बनाना है जो प्रत्येक अनुरोध के स्रोत IP पते को घुमाता है। उदाहरण के तौर पर, IPSpinner के माध्यम से...

drs-malware-scan

Eseguire l'analisi della scansione malware dei server on-prem utilizzando i servizi AWS Sfide con il rilevamento malware on-premises Può essere difficile per i team di sicurezza monitorare continuamente tutti i server on-premises a causa di vincoli di budget e risorse. L'antivirus basato su firme...

drs-malware-scan

Perform malware scan analysis of on-prem servers using AWS services Challenges with on-premises malware detection It can be difficult for security teams to continuously monitor all on-premises servers due to budget and resource constraints. Signature-based antivirus alone is insufficient as moder...

CVE-2026-44578

CVE-2026-44578 — SSRF nell'aggiornamento WebSocket di Next.js Server-Side Request Forgery pre-autenticazione nelle distribuzioni self-hosted di Next.js. Una singola richiesta HTTP appositamente costruita estrae credenziali AWS, segreti e dati di servizi interni da localhost:80...

outpost

Outpost AWS परीक्षण और रिपोर्ट प्रबंधन Outpost एक सरल उपकरण है जो AssumeRole के लिए AWS कॉन्फ़िगरेशन फ़ाइलें बनाने, खातों की जाँच के लिए परीक्षण क्षमता, और ScoutSuite स्कैन परिणामों के लिए रिपोर्ट जनरेटर प्रदान करता है। ScoutSuite चलाएँ परिणामों को पार्स करें ✨रिपोर्ट निष्कर्ष उत्पन्न करें✨ स्थाप...

bucky

Bucky Uno strumento per l'enumerazione degli ID account S3 e la scoperta di bucket Dato un singolo bucket S3 accessibile, bucky estrae l'ID account AWS di 12 cifre che lo possiede, poi scopre bucket aggiuntivi appartenenti allo stesso account fuzzando i nomi dei bucket contro una wordlist — tutto...

flan

Flan Scan is a lightweight network vulnerability scanner. With Flan Scan you can easily find open ports on your network, identify services and their version, and get a list of relevant CVEs affecting your network. Flan Scan is a wrapper over Nmap and the vulners script which turns Nmap into a...

sisu

sisu ⚡ Il tuo AWS, come file system. Questo: root@kitploit: grep -l "AdministratorAccess" iam/users//policies.json Invece di questo: root@kitploit: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query...

GoAWSConsoleSpray

GoAWSConsoleSpray GoAWSConsoleSpray è uno strumento che può essere utilizzato per fare spray delle credenziali della console IAM di AWS al fine di identificare un login valido per un account utente. La CLI di AWS non offre un modo per autenticarsi tramite nome utente/password, solo la console web...

gospider

GoSpider GoSpider - Fast web spider written in Go Painless integrate Gospider into your recon workflow? this project was part of Osmedeus Engine. Check out how it was integrated at @OsmedeusEngine Installation GO install root@kitploit: GO111MODULE=on go install...

CVE-2026-25604-PoC

CVE-2026-25604 PoC Injection d'en-tête Host menant à un contournement de l'authentification SAML dans AWS Auth Manager d'Apache Airflow Un attaquant peut injecter un en-tête Host malveillant dans le flux de connexion SAML, ce qui entraîne le pointage de l'URL du service de consommation d'assertio...

CVE-2025-2825

CVE-2025-2825 - CrushFTP WebInterface Authentifizierungsumgehung CVE-2025-2825 PoC Dieses Skript nutzt die Schwachstelle zur Authentifizierungsumgehung in CrushFTP in den folgenden Versionen aus: 10.0.0 10.8.3 11.0.0 11.3.0 Funktionsweise Die AWS-S3-Authentifizierung von CrushFTP kann umgangen...

pytm

pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...