74 matches found
git-hound
🐾 GitHound 패턴 매칭, 패치 공격, 일괄 포착 비밀 스내처. 개요 GitHound는 GitHub dork와 패턴 매칭, 컨텍스트 감지, 커밋 기록 분석을 결합하여 GitHub 전반에서 노출된 API 키, 비밀 및 자격 증명 을 사냥합니다. GitHub dork를 GitHound에 입력하면 쿼리와 일치하는 모든 파일과 리포지토리에서 비밀을 스캔합니다. 일반적인 스캐너와 달리 GitHound는 GitHub의 Code Search API 를 활용하여 소수의 타겟이 아닌 모든 공개 리포지토리에 대한 전체 가시성을 제공합니다...
gato
!WARNING This repository is deprecated and archived Gato has been superseded by Trajan , Praetorian's multi-platform CI/CD vulnerability detection and attack automation tool. Trajan consolidates GitHub Actions Gato and GitLab Glato CI/CD attack capabilities into a single, actively-maintained...
gf
gf grep을 감싸서 흔한 패턴을 직접 입력하지 않아도 되게 하는 래퍼입니다. 뭐? 왜? 저는 grep을 많이 사용합니다. 코드 베이스를 감사할 때, meg의 출력을 확인할 때, 또는 그냥 일반적으로 대량의 데이터를 다룰 때, 저는 종종 다음과 같은 상당히 복잡한 패턴을 사용하게 됩니다: ▶ grep -HnrE '$POST|GET|COOKIE|REQUEST|SERVER|FILES|php://input|stdin' 이 모든 것을 입력할 때 실수하기 쉽고, 결과가 없는 이유가 찾을 것이 없어서인지, 패턴을 잘못 작성했거나 잘못된...
log4jhound
log4jhound 프로젝트와 시스템에서 Log4j 발생 항목을 탐지하는 Bash 스크립트: JAR 파일의 압축을 풀어 Manifest 파일을 분석하고, 소스 코드에서 텍스트 검색을 수행합니다. 사용법: ./log4jhound.sh rootdirectory...
log4j-cve-code-search-resources
코드 검색을 사용하여 log4j CVE-2021-44228 및 log4j CVE-2021-45046 수정/완화하기...
ASC
Droid ASC: DeCompiler 프리미티브로서의 R8 컴파일러 최적화 https://blackhat.com/europe/arsenal/schedule/index.htmldroid-asc-r8-compiler-optimization-as-a-decompiler-primitive-54834 대규모 Android APK를 디컴파일할 때, 표준 절차는 기다리는 것입니다. 도구가 기가바이트의 RAM을 소비하고, 아티팩트를 완전히 부풀리며, 무거운 전역 인덱스와 상호 참조를 구축하는 데 수십 분을 소비할 때까지 기다립니다... 이...
Vulnerable Code Search: Transferable Attack for Code Language Models
Reliable code retrieval is crucial for developer productivity and effective code reuse. However, current neural code language models CLMs powering search tools are susceptible to adversarial attacks targeting non-functional textual elements. In this paper, we introduce a programming...
metabigor v2.2.0
Metabigor - OSINT power without API key hassle What is Metabigor? Metabigor maps a target's infrastructure without asking you to register for a single API key. Network ranges, certificates, related domains, exposed ports, CDN vendors, and code leaks - all from free sources, all pipeable into each...
CVE-2026-48703
Warp is an agentic development environment. From 0.2025.04.09.08.11.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution policy bypass in Agent code search tools. The affected Grep and FileGlob actions are authorized as read/search operations, but their implementations...
CVE-2026-48703 Warp: Command Injection via Warp code search tool arguments
Warp is an agentic development environment. From 0.2025.04.09.08.11.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution policy bypass in Agent code search tools. The affected Grep and FileGlob actions are authorized as read/search operations, but their implementations...
CVE-2026-48703
Summary: CVE-2026-48703 affects Warp’s Agent Code Search tools (Grep and FileGlob). From 0.2025.04.09.08.11.stable_00 through 0.2026.05.06.15.42.stable_01, these tools perform read/search actions but construct shell commands from agent-controlled inputs (search text, paths, glob patterns) and exe...
CVE-2026-48703 Warp: Command Injection via Warp code search tool arguments
Warp is an agentic development environment. From 0.2025.04.09.08.11.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution policy bypass in Agent code search tools. The affected Grep and FileGlob actions are authorized as read/search operations, but their implementations...
CVE-2026-48703
Warp is an agentic development environment. From 0.2025.04.09.08.11.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution policy bypass in Agent code search tools. The affected Grep and FileGlob actions are authorized as read/search operations, but their implementations...
CVE-2026-48703 Warp: Command Injection via Warp code search tool arguments
Warp is an agentic development environment. From 0.2025.04.09.08.11.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution policy bypass in Agent code search tools. The affected Grep and FileGlob actions are authorized as read/search operations, but their implementations...
EUVD-2026-39011
Warp is an agentic development environment. From 0.2025.04.09.08.11.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution policy bypass in Agent code search tools. The affected Grep and FileGlob actions are authorized as read/search operations, but their implementations...
CVE-2026-48703: Improper Neutralization of Special Elements used in an OS Command
Warp is an agentic development environment. From 0.2025.04.09.08.11.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution policy bypass in Agent code search tools. The affected Grep and FileGlob actions are authorized as read/search operations, but their implementations...
PT-2026-48373
Name of the Vulnerable Software and Affected Versions Warp versions 0.2025.04.09.08.11.stable 00 through 0.2026.05.06.15.42.stable 00 Description Warp contains a command execution policy bypass within its Agent code search tools. The Grep and FileGlob actions, which are authorized as read or sear...
Detecting Privilege Escalation in Polyglot Microservices Via Agentic Program Analysis
Microservices are widely adopted in modern cloud systems due to their scalability and fault tolerance. However, microservice architectures introduce significant complexity in privilege and permission control, creating risks of privilege escalation where attackers can gain unauthorized access to...