aws_pwn

AWS pwn Sommario Questa è una raccolta di script scritti malamente per svolgere vari compiti relativi ai penetration test su AWS. Non ti preoccupare se non funziona per te. Potrebbe essere che AWS sia cambiato da quando uno strumento è stato scritto o che il codice faccia schifo. In ogni caso,...

sss3

SSS3 Simple Storage Scanner SSS3 è un semplice software per testare bucket S3. Utilizza l'aws cli per cercare bucket pubblici in un elenco di domini/sottodomini. Requisiti di base Richiede l'aws cli installato e configurato con una policy s3 definita Dovresti avere un elenco di domini/sottodomini...

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

poro

poro Beschreibung Scannt nach öffentlich zugänglichen Assets in Ihrer AWS-Umgebung Von diesem Tool abgedeckte Dienste: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro prüft auch, ob ein von Ihnen angegebenes Tag auf identifizierte öffentliche Ressourcen angewend...

s3reverse

s3reverse Install go get root@kitploit: $ go get -u github.com/hahwul/s3reverse snap root@kitploit: snap install s3reverse brew...

EUVD-2026-42286

SeaweedFS: Improper authorization in the S3Tables / Iceberg REST management API lets a low-privileged S3 user enumerate administrator-owned table buckets...

bucket-stream

🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...

s3crets_scanner

S3cret Scanner: Caccia ai segreti caricati su bucket S3 pubblici Il tool S3cret Scanner è progettato per fornire un livello complementare alle Best Practices di sicurezza di Amazon S3 cacciando proattivamente i segreti nei bucket S3 pubblici. Può essere eseguito come attività programmata o...

GHSA-GG93-X632-9CCV Vikunja vulnerable to Improper Authorization and Authorization Bypass Through User-Controlled Key

Summary A user with only a single self-owned project can permanently destroy the Kanban bucket assignments taskbuckets and task ordering taskpositions of any other project view in the entire instance. The ProjectView.Delete model method runs three SQL statements: the first is properly scoped to...

aws_pwn

AWS pwn Summary This is a collection of horribly written scripts for performing various tasks related to penetration testing AWS. Please don't be sad if it doesn't work for you. It might be that AWS has changed since a given tool was written or it might be that the code sux. Either way, please fe...

S3-from-csp

S3-from-csp Extrai todos os S3 Buckets dos cabeçalhos de relatório CSP e testa vulnerabilidades de upload de arquivos Instalação root@kitploit: go install github.com/RandomRobbieBF/S3-from-csp@latest Execução root@kitploit: s3fromcsp file.txt...

CloudBrute

CloudBrute Uma ferramenta para encontrar infraestrutura, arquivos e aplicativos de uma empresa alvo nos principais provedores de nuvem Amazon, Google, Microsoft, DigitalOcean, Alibaba, Vultr, Linode. O resultado é útil para caçadores de recompensas de bugs, equipes vermelhas red teamers e...

sisu

sisu ⚡ Il tuo AWS, come file system. Questo: root@kitploit: grep -l "AdministratorAccess" iam/users//policies.json Invece di questo: root@kitploit: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query...

S3BucketList

S3BucketList Cerca, elenca e controlla i bucket S3 trovati nelle richieste di rete mentre navighi. Funzionalità Filtra i bucket S3 Estrae le autorizzazioni ACL Scarica i bucket registrati Gestisci i bucket registrati Registrazione bucket specifica per scheda Rileva bucket non rivendicati / in...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

s3dns

S3DNS s3dns è un server DNS leggero che aiuta a scoprire bucket di cloud storage AWS S3, Google Cloud Storage e Azure Blob risolvendo richieste DNS, tracciando i CNAME e confrontando i pattern URL noti dei bucket. È un pratico compagno per pentester , cacciatori di bug bounty e analisti di...

Linux Distros Unpatched Vulnerability : CVE-2026-18692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to b...

UBUNTU-CVE-2026-18692

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution o...

Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Service and Potential Remote Code Execution

An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed. Subsequent operations could then result in a server crash or, potentially, execution o...