hayat

Hayat Google Cloud Platform Auditing & Hardening Script Que signifie "Hayat" ? Eh bien, j'ai eu du mal à trouver un nom unique, honnêtement. "Hayat" est un mot turc qui signifie "Vie" en anglais et c'est aussi le nom de ma nièce. Prêt à la rencontrer ? 😍 😍 😍 Hayat est un script d'audit et de...

sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

cloudsploit

CloudSploit by Aqua - Cloud Security Scans Quick Start Generic $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ npm install $ ./index.js -h Docker $ git clone https://github.com/aquasecurity/cloudsploit.git $ cd cloudsploit $ docker build . -t cloudsploit:0.0.1 $...

offensive-docker

Offensive Docker est une image contenant les outils les plus utilisés pour créer un environnement de pentest facilement et rapidement. ➡️ Note : Consultez le dépôt suivant pour savoir comment lancer offensive docker sur un VPS dans Google Cloud Platform ou Digital Ocean crédit gratuit inclus...

kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

kubebot

Kubebot Un Slackbot de test de sécurité construit avec un backend Kubernetes sur Google Cloud Platform NOTE : Je ne maintiens plus activement ce projet. Je travaille sur la v2 de Kubebot avec quelques autres personnes, qui sera probablement présentée lors d'une prochaine conférence de sécurité...

nuvola

nuvola nuvola with the lowercase n is a tool to dump and perform automatic and manual security analysis on AWS environments configurations and services using predefined, extensible and custom rules created using a simple Yaml syntax. The general idea behind this project is to create an abstracted...

pd-agent

ProjectDiscovery Cloud Platform — Agent Ce qu'il fait • Démarrage rapide • Installation • Configuration • Passage à l'échelle Ce qu'il fait pd-agent vous permet de scanner vos propres réseaux internes depuis la ProjectDiscovery Cloud Platform. Installez l'agent sur une machine située dans le rése...

CVE-2026-2472-Vertex-AI-SDK-Google-Cloud

🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Outil simple de preuve de concept 🛠 À propos de cette application Cet outil présente une preuve de concept technique PoC pour le problème de sécurité CVE-2026-2472. Ce problème affecte le SDK Python Vertex AI de Google Cloud Platform. Il s'agit d'une...

GATOR

KIT D'ATTAQUE GCP POUR LA RECHERCHE OFFENSIVE GATOR - Kit d'attaque GCP pour la recherche offensive , un outil conçu pour aider à la recherche et à l'exploitation des environnements Google Cloud. Il propose une gamme complète de modules adaptés pour soutenir les utilisateurs dans diverses étapes...

CVE-2026-20253

🚨 CVE-2026-20253 - 중요한 Splunk Enterprise 무인증 파일 생성 취약점 Splunk Enterprise 및 Splunk Cloud Platform에 영향을 미치는 무인증 임의 파일 생성 및 잘라내기 취약점 📖 요약 CVE-2026-20253 은 Splunk Enterprise 및 Splunk Cloud Platform의 중요한 취약점으로, 노출된 PostgreSQL 사이드카 서비스 엔드포인트를 통해 인증되지 않은 원격 공격자가 임의 파일을 생성하거나 잘라낼 수 있습니다. 취약한 기능에 인증 제어가 없...

CVE-2026-96613

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network...

CVE-2026-101104

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized actions, such as altering device settings or triggering...

EUVD-2026-91750

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network...

CVE-2026-96613 Missing Authorization in Meari IoT Cloud Platform OpenAPI Service

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network...

CVE-2026-96613

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw (CWE-862) that allows authenticated users to access the complete device shadow of any device by specifying its device ID . The service fails to verify a relationship between the requester and the target device, le...

CVE-2026-96613 Missing Authorization in Meari IoT Cloud Platform OpenAPI Service

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying its device ID. This vulnerability exposes sensitive information, such as device credentials, owner details, network...

CVE-2026-101104

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate configurations of devices they do not own. By exploiting this flaw, an attacker can alter device settings, trigger unintended behaviors, or access sensitive informatio...

CVE-2026-101104 Missing Authorization in Meari IoT Cloud Platform OpenAPI Service

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized actions, such as altering device settings or triggering...

EUVD-2026-91746

The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. This vulnerability enables attackers to perform unauthorized actions, such as altering device settings or triggering...