cloudfoxable

ハッキングを始める: CloudFoxable 詳細はブログをご覧ください: Introducing CloudFoxable: A Gamified Cloud Hacking Sandbox 背景 CloudFox は、ペネトレーションテスターやセキュリティ専門家がクラウドインフラストラクチャ内の悪用可能な攻撃経路を見つけるのに役立ちます。しかし、現在の環境に存在しないサービスを見つけて悪用したい場合はどうでしょうか? エンタープライズ AWS 環境へのアクセスがない場合はどうでしょうか? CloudFoxable は、CloudFox...

nuvola

nuvola nuvola 소문자 n는 사전 정의되고 확장 가능하며 사용자 정의가 가능한 규칙을 간단한 Yaml 구문으로 생성하여 AWS 환경 구성 및 서비스를 덤프하고 자동 및 수동 보안 분석을 수행하는 도구입니다. 이 프로젝트의 기본 아이디어는 클라우드 플랫폼의 추상화된 디지털 트윈을 만드는 것입니다. 구체적인 예를 들어, nuvola는 Active Directory 분석에 사용되는 BloodHound의 특성을 반영하지만, 클라우드 환경현재는 AWS만 해당에서 사용됩니다. 그래프 데이터베이스를 사용하면 다양한 혁신적인 공격...

k8scout

k8scout 베타 — 승인된 보안 평가를 위한 단일 바이너리 Kubernetes 공격 경로 엔진. 손상된 파드에 넣고 실행하면, 현재 거점에서 cluster-admin, 노드 접근, 시크릿 탈취, 클라우드 IAM 역할까지 이어지는 모든 현실적인 권한 상승 경로의 지도를 얻을 수 있습니다. 아이디어 Kubernetes 파드에서 RCE를 얻었습니다. 이제 무엇을 할까요? k8scout이 그 질문에 답합니다. 손상된 파드의 서비스 어카운트가 무엇을 할 수 있는지 자동으로 발견하고, RBAC 그래프를 매핑하며, 정확한 거점에서 고가...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

GoodHound

GoodHound / / / / / / / / / / / / / / / // / / / / / / / / // / // / // / // / / // / // / / / / // / ///,// ///,// //,/ 공격자는 그래프로 생각하고, 방어자는 행동으로 생각하며, 관리자는 차트로 생각합니다. GoodHound는 가장 빈번한 경로를 식별하여 고가치 대상으로 가는 공격 경로의 우선순위를 정하고, 조치 가능한 출력을 생성하여 Bloodhound를 실용화합니다. 저는 이것으로 생계를 유지할 수 있을 만큼 운이...

BloodBash

BloodBash SquidSec オープンソースプロジェクト SquidOffense.com · GitHub BloodBash は、SquidSec によって作成・管理されているオープンソースのオフライン SharpHound および AzureHound JSON アナライザーです。グラフを構築し、AD/Entra の攻撃パスと設定ミスを浮き彫りにし、優先順位付けされた検出事項を出力します。Neo4j や BloodHound UI は不要です。 | ---|--- 組織| SquidSec ウェブサイト| https://squidoffense.com/ アプリバージョン...

Dop2Mop

Dop2Mop BloodHound를 위한 개념 증명 OpenGraph 수집기로, DevOps에서 MLOps 인프라로 이어지는 공격 경로를 매핑합니다. Brett Hawkins@h4wkst3r의 Pipelines of Privilege: Attack Paths from DevOps to MLOps Infrastructure를 기반으로 합니다. 목차 감사의 말 개요 지원 플랫폼 매핑된 신뢰 경계 설치 선택적 종속성 빠른 시작 데모 데이터 생성 BloodHound로 수집 설정 설정 파일 자격 증명 검증 CLI 참조 명령 개요 전역 ...

SoK: When Safe Agents Fail Together: The Security of Multi Agent LLM Systems

Safe agents can fail together. Multi-agent LLM systems MAS move information, state, decisions, and authority across principal boundaries, creating failures that local checks may miss. Without an execution-level view, a multi-agent setting can easily be mistaken for evidence of a genuinely...

pentest-ai v1.2.0

pentest-ai The pentest tool that proves its findings. No oracle, no badge. Website · Install · Why verification · Docs · Benchmarks · Agents · Discord ⚠️ Offensive tooling, authorized testing only. By installing you accept the AUP and Terms. Full text in Responsible use ↓ ptai is an AI-driven...

OWASP Subtractive Security Top 10 Project

The OWASP Subtractive Security Top 10 Project is an initiative to identify, document, and promote the highest-impact opportunities for reducing cyber risk through the elimination of attack paths. Unlike traditional security guidance that focuses primarily on adding controls, the Subtractive...

Cloud-Security-Portfolio

Cloud-Security-Portfolio Offensive AWS security portfolio — IA...

Bridging the Visibility Gap: A Unified Security Operating Model for Hybrid Cloud Teams

Move beyond chasing vulnerabilities to a unified hybrid risk strategy. The Sensor Workload Scanner is now GA and extends our risk prioritization engine to on-premise environments to identify the critical attack paths across your hybrid cloud...

Uncovering Hidden Attack Paths in Cloud Environments Using Runtime Signals

Wiz now layers runtime signals into the Security Graph, exposing hidden attack paths to give security teams a complete picture of risk...

AttackGraph

AttackGraph AI AttackGraph AI is an AI-powered application se...

Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore

Assume the breach. Zero-days keep shipping, AI is writing exploits faster than anyone patches, and "patch everything in time" stopped working years ago. Stop betting the org on winning that race. You don't control which bug lands. You control what it can reach once it does. That is a question abo...

Identity Exposure Management: Risks and Response

Start with the path that carries risk. Security teams need a clear view of access risk. Stolen tokens and excessive privileges turn legitimate access into an attack route. Identity risk becomes urgent when one exposed account opens a path across critical systems. Identity exposure management is t...

[Webinar] How Modern Attack Paths Cross Code, Pipelines, and Cloud

TL;DR: Stop chasing thousands of "toast" alerts. Join experts from Wiz to learn how hackers connect tiny flaws to build a "Lethal Chain" to your data—and how to break it. Register for the Strategic Briefing Here. Most security tools work like a smoke alarm that goes off every time you burn a piec...

Firmware Distribution As Attack Surface: A Security Study of ASIC Cryptocurrency Miners

ASIC cryptocurrency miners are a core component of blockchain infrastructures, directly converting computation and energy into monetary value. Despite their economic im- portance, their security is rarely evaluated in a structured manner. In this paper, we show that the firmware distribution...

What Is Threat Exposure Management? A Complete Guide

Most security teams can tell you how many vulnerabilities they found last quarter. Very few can tell you which of those vulnerabilities an attacker could actually exploit to breach a critical system. That gap between "found" and "actually dangerous" is the problem threat exposure management was...

Product Walkthrough: How Mesh CSMA Reveals and Breaks Attack Paths to Crown Jewels

Security teams today are not short on tools or data. They are overwhelmed by both. Yet within the terabytes of alerts, exposures, and misconfigurations – security teams still struggle to understand context: Q: Which exposures, misconfigurations, and vulnerabilities chain together to create viable...