AWS-Threat-Simulation-and-Detection

Обнаружение угроз AWS с помощью Stratus Red Team Этот репозиторий — документация моих приключений с Stratus Red Team — инструментом для эмуляции действий злоумышленников в облаке. Stratus Red Team — это «Atomic Red Team для облака», позволяющий детально и самодостаточно эмулировать атакующие...

sisu

sisu ⚡ Il tuo AWS, come file system. Questo: root@kitploit: grep -l "AdministratorAccess" iam/users//policies.json Invece di questo: root@kitploit: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query...

OPENSUSE-SU-2026:11603-1 amazon-cloudwatch-agent-1.300071.0-2.1 on GA media

These are all security issues fixed in the amazon-cloudwatch-agent-1.300071.0-2.1 package on the GA media of openSUSE Tumbleweed...

terraform-aws-secure-baseline

terraform-aws-secure-baseline Terraform Module Registry A terraform module to set up your AWS account with the reasonably secure configuration baseline. Most configurations are based on CIS Amazon Web Services Foundations v1.4.0 and AWS Foundational Security Best Practices v1.0.0. See Benchmark...

CVE-2026-54428 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, nrjmx, sonarqube, cloudwatch-exporter, druid, thingsboard, opensearch, logstash, apicurio-registry, akhq, cassandra-reaper...

GHSA-V3JC-474W-2WM6 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, nrjmx, sonarqube, cloudwatch-exporter, druid, thingsboard, opensearch, logstash, apicurio-registry, akhq, cassandra-reaper...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: prometheus, promxy, amazon-cloudwatch-agent-operator, promxy-fips, amazon-cloudwatch-agent-operator-fips, pulumi, vault...

GO-2025-3525 vulnerabilities

Vulnerabilities for packages: tempo, kargo, grafana-alloy, argo-workflows, kubeflow-pipelines, k8sgpt, splunk-otel-collector, nats, opentelemetry-collector-contrib, opentelemetry-collector, amazon-cloudwatch-agent, argo-rollouts...

GO-2025-4123 vulnerabilities

Vulnerabilities for packages: bento, grafana-alloy, splunk-otel-collector, argo-events, sqlexporter, cluster-api-aws-controller, opentelemetry-collector-contrib, jitsucom-bulker, amazon-cloudwatch-agent...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: prometheus, k8sgpt, minio, metrics-server, aws-otel-collector, fluent-bit-plugin-loki, istio, amazon-cloudwatch-agent-operator, certificate-transparency, tempo, cloud-sql-proxy, jaeger, node-problem-detector, datadog-agent, minio-operator, keda, prometheus-operator,...

GO-2024-3311 vulnerabilities

Vulnerabilities for packages: pulumi, promxy, amazon-cloudwatch-agent-operator...

GO-2024-3305 vulnerabilities

Vulnerabilities for packages: pulumi, rancher-agent, promxy, kubevela, amazon-cloudwatch-agent-operator, k3s...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: prometheus, kubernetes-dashboard-web, grafana-alloy, kubernetes-csi-external-health-monitor, kubernetes-dashboard, rabbitmq-cluster-operator, kubernetes-csi-driver-hostpath, harbor-cli, nri-haproxy, spark-operator, opentofu, tkn, clickhouse-operator,...

CLEANSTART-2026-DJ79575 Security fixes in amazon-cloudwatch-agent-fips 1.300069.0-r1

Package amazon-cloudwatch-agent-fips version 1.300069.0-r1 fixes 10 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-42151, CVE-2026-44903, ghsa-fw8g-cg8f-9j28...

PT-2026-69305

Name of the Vulnerable Software and Affected Versions lmammino oidc-authorizer versions prior to 0.4.1 Description The Lambda Authorizer component contains an issue where raw Authorization header values and complete bearer tokens or JWTs are logged on authentication failure paths, potentially...

Amazon Linux 2 : amazon-cloudwatch-agent, --advisory ALAS2-2026-3844 (ALAS-2026-3844)

The version of amazon-cloudwatch-agent installed on the remote host is prior to 1.300069.1-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3844 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject...

CLEANSTART-2026-ZO12938 Security fixes in amazon-cloudwatch-agent-fips 1.300066.1-r1

Package amazon-cloudwatch-agent-fips version 1.300066.1-r1 fixes 20 vulnerabilities: CVE-2026-39824, CVE-2026-39835, CVE-2026-46598, CVE-2026-25681, CVE-2026-27136...

CVE-2026-56746 vulnerabilities

Vulnerabilities for packages: zipkin, logstash, cloudwatch-exporter, kserve-modelmesh, spark, apache-activemq-artemis, flyway, management-api-for-apache-cassandra-5.0, wavefront-proxy, keycloak, druid, thingsboard, apache-nifi, opensearch, neo4j, apicurio-registry, apache-pulsar, infinispan, tez,...

GHSA-Q4F6-JM68-57WW vulnerabilities

Vulnerabilities for packages: zipkin, logstash, cloudwatch-exporter, kserve-modelmesh, spark, apache-activemq-artemis, flyway, management-api-for-apache-cassandra-5.0, wavefront-proxy, keycloak, druid, thingsboard, apache-nifi, opensearch, neo4j, apicurio-registry, apache-pulsar, infinispan, tez,...

CVE-2026-59899 vulnerabilities

Vulnerabilities for packages: zipkin, logstash, cloudwatch-exporter, kserve-modelmesh, spark, apache-activemq-artemis, flyway, management-api-for-apache-cassandra-5.0, wavefront-proxy, keycloak, druid, thingsboard, apache-nifi, opensearch, neo4j, apicurio-registry, apache-pulsar, infinispan, tez,...