dufflebag

Dufflebag Dufflebag is a tool that searches through public Elastic Block Storage EBS snapshots for secrets that may have been accidentally left in. You may be surprised by all the passwords and secrets just laying around! The tool is organized as an Elastic Beanstalk "EB", not to be confused with...

AWS Elastic Beanstalk Detect

Detects AWS Elastic Beanstalk Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects AWS Elastic Beanstalk Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS Elastic Beanstalk Detect', 'description':...

Beanstalk Service - Detect

Beanstalk is a simple, fast work queue. Its interface is generic, but was originally designed for reducing the latency of page views in high-volume web applications by running time-consuming tasks asynchronously. !/usr/bin/env python3 -- coding: utf-8 -- """Beanstalk is a simple, fast work...

AWS Elastic Beanstalk Dockerrun.aws.json - Exposure Detection

Detected AWS Elastic Beanstalk Dockerrun.aws.json configuration file was publicly accessible, potentially revealing Docker container definitions, image names, hostnames, port mappings, and infrastructure details. !/usr/bin/env python3 -- coding: utf-8 -- """Detected AWS Elastic Beanstalk...

AWS Elastic Beanstalk Detection

Detects Elastic Beanstalk environment hostnames and headers. !/usr/bin/env python3 -- coding: utf-8 -- """Detect AWS Elastic Beanstalk environments.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "AWS Elastic Beansta...

allianceauth (>=2.1.0b1, <=2.1.1), beanstalk-dispatch (>=0.0.3, <=0.0.5) +169 more potentially affected by CVE-2019-11358 via django (>=2.0.0rc1, <=2.1.8)

django PYPI version =2.0.0rc1, =2.1.0b1, =0.0.3, =0.1.0, =0.1.0, =0.5.0, =3.0.0.0b3, =2.1.0b0, =0.0.1, =1.1.0, =0.0.7, =0.0.8 and more Source cves: CVE-2019-11358 Source advisory: OSV:PYSEC-2026-628...

EUVD-2010-2079

Malware in sbrugna...

EUVD-2022-5373

Malicious code in bioql PyPI...

Malicious code in beanstalk-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 447e0e40d99f975438792b85715ae48b89f8fd877e0c44b434643a73ca19731c The OpenSSF Package Analysis project identified 'beanstalk-api' @ 1.0...

MAL-2025-5302 Malicious code in beanstalk-api (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 447e0e40d99f975438792b85715ae48b89f8fd877e0c44b434643a73ca19731c The OpenSSF Package Analysis project identified 'beanstalk-api' @ 1.0...

New Pacu Module: Secret Enumeration in Elastic Beanstalk

The post New Pacu Module: Secret Enumeration in Elastic Beanstalk appeared first on Rhino Security Labs...

IMDShift - Automates Migration Process Of Workloads To IMDSv2 To Avoid SSRF Attacks

AWS workloads that rely on the metadata endpoint are vulnerable to Server-Side Request Forgery SSRF attacks. IMDShift automates the migration process of all workloads to IMDSv2 with extensive capabilities, which implements enhanced security measures to protect against these attacks. Features...

Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials in plain text

Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials unencrypted in its global configuration file org.jenkinsci.plugins.awsbeanstalkpublisher.AWSEBPublisher.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...

GHSA-VJR6-CQ22-M4Q5 Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials in plain text

Jenkins AWS Elastic Beanstalk Publisher Plugin stores credentials unencrypted in its global configuration file org.jenkinsci.plugins.awsbeanstalkpublisher.AWSEBPublisher.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...

Clever Cryptocurrency Theft

Beanstalk Farms is a decentralized finance project that has a majority stake governance system: basically people have proportional votes based on the amount of currency they own. A clever hacker used a "flash loan" feature of another decentralized finance project to borrow enough of the currency ...

Attacker Steals $182 Million From Ethereum-based Beanstalk Stablecoin Protocol

By Deeba Ahmed Interestingly, the attacker donated $250,000 of the stolen funds to an address used for raising donations for the… This is a post from HackRead.com Read the original post: Attacker Steals $182 Million From Ethereum-based Beanstalk Stablecoin Protocol...

Cross-site Scripting in Beanstalk console

Beanstalk console ptrofimov/beanstalkconsole prior to 1.7.14 is vulnerable to cross-site scripting...

GHSA-2CJF-W7C4-FHF6 Cross-site Scripting in Beanstalk console

Beanstalk console ptrofimov/beanstalkconsole prior to 1.7.14 is vulnerable to cross-site scripting...

CVE-2022-0539

Cross-site Scripting XSS - Stored in Packagist ptrofimov/beanstalkconsole prior to 1.7.14...

PT-2022-13250

Name of the Vulnerable Software and Affected Versions ptrofimov/beanstalk console versions prior to 1.7.14 Description The issue is related to Cross-site Scripting XSS - Stored, which allows attackers to inject malicious scripts into the application. This can lead to unauthorized access to...