cloudfrunt

CloudFrunt CloudFrunt is a tool for identifying misconfigured CloudFront domains. Background CloudFront is a Content Delivery Network CDN provided by Amazon Web Services AWS. CloudFront users create "distributions" that serve content from specific sources an S3 bucket, for example. Each CloudFron...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

aws_public_ips

awspublicips Table of Contents What's it for Quick start CLI reference Configuration IAM permissions Changelog Contributing Getting in touch What's it for awspublicips is a tool to fetch all public IP addresses both IPv4/IPv6 associated with an AWS account. It can be used as a library and as a CL...

DomainFrontDiscover

DomainFrontDiscover Scripts and results for finding domain frontable CloudFront domains A walkthrough of what happened here can be found at https://www.peew.pw/blog/2018/2/22/how-i-identified-93k-domain-frontable-cloudfront-domains ConfirmedFrontableDomains.txt A list of 93k+ domains that were...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-azure-storage, crossplane-provider-aws-kinesis, nuclei, crossplane-provider-family-azure, grafana, gitness, crossplane-provider-azure-managedidentity, terraform-provider-grafana, crossplane-provider-aws-dynamodb,...

GHSA-FH4F-47MF-F2GJ vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-azure-storage, crossplane-provider-aws-kinesis, nuclei, crossplane-provider-family-azure, grafana, gitness, crossplane-provider-azure-managedidentity, terraform-provider-grafana, crossplane-provider-aws-dynamodb,...

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-azure-storage, crossplane-provider-aws-kinesis, nuclei, crossplane-provider-family-azure, grafana, gitness, crossplane-provider-azure-managedidentity, terraform-provider-grafana, crossplane-provider-aws-dynamodb,...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-azure-storage, crossplane-provider-aws-kinesis, nuclei, crossplane-provider-family-azure, grafana, gitness, crossplane-provider-azure-managedidentity, terraform-provider-grafana, crossplane-provider-aws-dynamodb,...

CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-azure-storage, crossplane-provider-aws-kinesis, nuclei, crossplane-provider-family-azure, grafana, gitness, crossplane-provider-azure-managedidentity, terraform-provider-grafana, crossplane-provider-aws-dynamodb,...

CVE-2026-100347 vulnerabilities

Vulnerabilities for packages: kubevela, crossplane-provider-azure-storage, crossplane-provider-aws-kinesis, nuclei, crossplane-provider-family-azure, grafana, gitness, crossplane-provider-azure-managedidentity, terraform-provider-grafana, crossplane-provider-aws-dynamodb,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, kiali, gke-gcloud-auth-plugin, grafana-mimir, gatus, bank-vaults, grafana-alloy, cluster-api, knative-serving, argo-events, istio, addon-resizer, kots, crossplane-provider-azure-managedidentity, karpenter, terraform-provider-acme,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: pulumi-language-java, gatus, step, argo-events, istio, kots, crossplane-provider-azure-managedidentity, terraform-provider-acme, tkn, tw, ksops, gomplate, atlantis, crossplane-provider-aws-route53, prometheus, skaffold, crossplane-provider-aws-eks, k3s,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: whereabouts, gke-gcloud-auth-plugin, sriov-network-device-plugin, gatus, bank-vaults, step, aws-eks-pod-identity-agent, kube-vip-cloud-provider, gitness, pguser, kserve-modelmesh-serving, kube-logging-operator-custom-runner, dbmate, nri-redis, ratify, ksops,...

AWS Cloudfront service detection

Detect websites using AWS cloudfront service !/usr/bin/env python3 -- coding: utf-8 -- """Detect websites using AWS cloudfront service.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'AWS Cloudfront service detection...

MAL-2026-10710 Malicious code in @equans-services/codex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d3c5a7e22ef9ecb88e2f6d85ef6132d80098e3e187cbc302de2c45140a5a5f1 This package typosquats @openai/codex under an unofficial scope and ships a postinstall hook package.json line 6: "postinstall": "node setup.js" that...

MAL-2026-10400 Malicious code in @equansservices/tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb693b5ae7f1fccb6c2aaa1a5f9225b23fb7ece3928feca604f2c5139ee5198 The package's postinstall hook node setup.js fetches a platform-specific payload from http://d2vf4rs175cy2k.cloudfront.net/install/v1/plugin.zip over...

Malicious code in @equansservices/tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bb693b5ae7f1fccb6c2aaa1a5f9225b23fb7ece3928feca604f2c5139ee5198 The package's postinstall hook node setup.js fetches a platform-specific payload from http://d2vf4rs175cy2k.cloudfront.net/install/v1/plugin.zip over...

Malicious code in @equansservices/setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b071598889a04c74a8398157555ccfffda5bbc713429df4cafbcf48df7f811af package.json declares a postinstall hook node setup.js that fires automatically on npm install. setup.js selects a platform-specific target and fetch...

MAL-2026-10094 Malicious code in @equansservices/setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b071598889a04c74a8398157555ccfffda5bbc713429df4cafbcf48df7f811af package.json declares a postinstall hook node setup.js that fires automatically on npm install. setup.js selects a platform-specific target and fetch...