204 matches found
athena
Athena OS์ ํจ๊ป ์๋ก์ด Pentesting ๊ฒฝํ์ ์์ํ์ธ์ ๐ InfoSec ์ ๋ฌธ๊ฐ, ๋ฒ๊ทธ ๋ฐ์ดํฐ ํํฐ, ์ด์ ์ ์ธ ํ์, ๊ทธ๋ฆฌ๊ณ ๋งค์ด ํด์ปค๋ฅผ ์ํด ํ์ด๋ฌ์ต๋๋ค๐ ๐ ์ง๊ธ Athena OS๋ฅผ ๋ง๋๋ณด์ธ์! ๐ ์์ Docker ์์ด์ฝ์ ํด๋ฆญํ์ฌ Athena OS Docker ์ปจํ ์ด๋๋ฅผ ์ดํด๋ณด์ธ์! ์์ ์์ด์ฝ์ ํด๋ฆญํ์ฌ Microsoft Store ์ฑ์์ Athena OS WSL์ ์ดํด๋ณด์ธ์! ์๋ํ๋ ํจํค์ง ์ ๋ฐ์ดํธ ์ด ์ ์ฅ์์ ํจํค์ง๋ nvchecker๋ฅผ ๊ธฐ๋ฐ์ผ๋ก ํ๋ ์ผ์ผ GitHub Actions ์ํฌํ๋ก๋ฅผ ํตํด...
nuclearpond
Nuclear Pond Nuclear Pond๋ ํด๋ผ์ฐ๋์์ Nuclei๋ฅผ ํ๋ฒํ ์๋, ์ ์ฐ์ฑ์ผ๋ก ํ์ฉํ๊ณ , ์ปคํผ ํ ์ ๊ฐ๋ณด๋ค ํจ์ฌ ์ ์ ๋น์ฉ์ผ๋ก ์ธํฐ๋ท ์ ์ฒด ์ค์บ์ ์ํํ๋ ๋ฐ ์ฌ์ฉ๋ฉ๋๋ค. ์ด๋ ๋ฐฑ์๋๋ก AWS Lambda๋ฅผ ํ์ฉํ์ฌ Nuclei ์ค์บ์ ๋ณ๋ ฌ๋ก ํธ์ถํ๊ณ , JSON ๊ฒฐ๊ณผ๋ฅผ S3์ ์ ์ฅํ์ฌ AWS Athena๋ก ์ฟผ๋ฆฌํ ์ ์๋ ์ต์ ์ ์ ๊ณตํ๋ฉฐ, ํด๋ผ์ฐ๋์์ ์ค์บ์ ์คํํ ์ ์๋ ๊ฐ์ฅ ์ ๋ ดํ ๋ฐฉ๋ฒ ์ค ํ๋์ ๋๋ค. Features ๊ฒฐ๊ณผ๋ฅผ ํฐ๋ฏธ๋, JSON ๋๋ S3๋ก ์ถ๋ ฅ ์ํ๋ ๋ฐฐ์น ์๋ก ์ค๋ ๋ ๋ฐ ๋ณ๋ ฌ ํธ์ถ...
nuclearpond-OFJAAAH
Nuclear Pond V.2 ็งใใกใฏใใฎใใญใธใงใฏใใใใฉใผใฏใใใใฎ็ด ๆดใใใใขใคใใขใ็ถ็ถใงใใใใใซใใพใใใไธ็ทใซใณใผใใๆนๅใใ่ชฐใใๅฉ็จใงใใใใใซใงใใใฐใจๆใใพใ - @OFJAAAH Nuclear Pondใใคใณในใใผใซใใใซใฏใใใใฏใจใณใใฎterraform moduleใ่จญๅฎใใๅฟ ่ฆใใใใพใใใใใฏterraform applyใๅฎ่กใใใใterragruntใๅฉ็จใใฆ่กใใพใใ AWS Lambdaใใใใฏใจใณใใจใใฆๅฉ็จใใฆNucleiในใญใฃใณใไธฆๅใซๅฎ่กใใJSONใฎๆคๅบ็ตๆใS3ใซไฟๅญใใฆAWS...
mythic_telegram_profile
Mythic์ฉ Telegram C2 ํ๋กํ Telegram์ Athena ๋ฐ Apollo ์์ด์ ํธ๋ฅผ ์ํ Mythic C2 ํ๋กํ์ ์ ๊ณตํฉ๋๋ค. ์ด๋ Telegram ๋น๊ณต๊ฐ ๋ด ๊ฐ ๋ฉ์์ง๋ฅผ ์ ์ก ์๋จ์ผ๋ก ์ฌ์ฉํ๊ณ , Mythic์ Push C2 gRPC ์๋น์ค๋ฅผ ์ปจํธ๋กค๋ฌ ๋ธ๋ฆฌ์ง๋ก ์ฌ์ฉํฉ๋๋ค. ์ํคํ ์ฒ Athena ๋๋ Apollo ์์ด์ ํธ ๋ด Telegram Bot API ์ปจํธ๋กค๋ฌ ๋ด Telegram C2 ์๋น์ค Mythic ์คํ ์ค์ธ ๊ฐ ์์ด์ ํธ๋ ์์ฒด Bot API ํ ํฐ์ ์ฌ์ฉํฉ๋๋ค. C2 ์๋น์ค๋ ํ๋์ ์ปจํธ๋กค๋ฌ ๋ด ํ ํฐ์...
CVE-2026-77810
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...
CVE-2026-77810
CVE-2026-77810 is a code injection vulnerability in the Neptune connector of aws-athena-query-federation , caused by a Gremlin query passthrough . A user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying compute for the connector, result...
CVE-2026-77810 Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...
CVE-2026-77810 Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...
EUVD-2026-64067
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...
CVE-2026-77810 Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...
CVE-2026-77810: Improper Neutralization of Directives in Dynamically Evaluated Code
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...
PT-2026-79440
In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...
CVE-2026-75910
Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...
EUVD-2026-63585
Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...
CVE-2026-75910 Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template
Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...
CVE-2026-75910 Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template
Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...
CVE-2026-75910 Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template
Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...
CVE-2026-75910
The ClickHouse connector deployment template in Amazon Athena Federated Query (versions before v2026.17.1) has an incorrect privilege assignment: an authenticated remote user can point the connector's connection string at an unrelated AWS Secrets Manager secret and a database endpoint they contro...
CVE-2026-75910: Incorrect Privilege Assignment
Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...
PT-2026-79118
Name of the Vulnerable Software and Affected Versions Amazon Athena Federated Query ClickHouse connector versions prior to v2026.17.1 Description Incorrect privilege assignment in the deployment template allows an authenticated remote user to read arbitrary AWS Secrets Manager secrets within the...