gitbleed_tools

GitBleed Tools - per estrarre dati da repository git mirrorati Informazioni Questo repository contiene script shell che possono essere usati per scaricare e analizzare le differenze tra repository Git clonati e mirror. Per maggiori informazioni sulla particolarità del comportamento di Git, visita...

gitleaks

Gitleaks ┌─○───┐ │ │╲ │ │ │ ○ │ │ ○ ░ │ └─░───┘ root@kitploit: !WARNING Gitleaks è completo di funzionalità. Non sto integrando nuove funzionalità in Gitleaks. Le versioni future conterranno solo patch di sicurezza. Sto spostando la mia attenzione su Betterleaks license:...

gitbleed_tools

GitBleed Tools - for extracting data from mirrorred git repositories About This repo contains shell scripts that can be used to download and analyze differences between cloned and mirror Git repositories. For more information about the underlying quirk in Git behavior, please visit read our blog...

pillager

Pillager Pillage filesystems for sensitive information with Go. Table of Contents 1. Summary 2. Installation 3. Usage 4. Exfiltration 5. Documentation Summary Pillager is designed to provide a simple means of leveraging Go's strong concurrency model to recursively search directories for sensitive...

GitLeaks

Componente GitLeaks GitLab CI Um componente GitLab CI para Gitleaks - uma ferramenta SAST para detetar e prevenir segredos codificados como palavras-passe, chaves de API e tokens em repositórios git. Funcionalidades Deteção de Segredos : Analisa repositórios em busca de segredos codificados e...

GitLeaks

Immagine Container di GitLeaks Build opinionato di gitleaks per la scansione di segreti in flussi di lavoro locali e pipeline. Caratteristiche Costruisce gitleaks dal sorgente upstream taggato con toolchain Go fissate per binari riproducibili. Componente GitLab CI su niclas-zone/ci/gitleaks...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, hey, php-fpmexporter, gitleaks, kubeflow, kubeflow-fips, dynamic-localpv-provisioner-fips, kube-state-metrics, terraform-provider-sendgrid, k3d, grpcurl, vt-cli, terraform-provider-sendgrid-fips...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, hey, gitleaks, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid, k3d, vt-cli, terraform-provider-sendgrid-fips...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: cg, undock, nuclei, gptscript, grype-db, zarf, grype-fips, syft-fips, kubescape, trufflehog-fips, gotenberg, mattermost-fips, filebrowser, chainctl, syft, k9s-fips, grype, chezmoi, mattermost, k9s, wolfictl, gitleaks, kots, trufflehog...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: grafana-alloy, gitness, gptscript, guac, podman, trufflehog, k9s, zarf, kubescape-operator, steampipe, envoy-gateway, terragrunt, filebrowser, zot, trivy-operator, opentofu, gitleaks, vcluster, trivy, undock, nsc, terraform, nuclei, rancher-fleet, tflint, xeol...

GO-2022-1059 vulnerabilities

Vulnerabilities for packages: k3d, php-fpmexporter, terraform-provider-sendgrid, dynamic-localpv-provisioner, hey, grpcurl, gitleaks, vt-cli, kubeflow...

GO-2021-0113 vulnerabilities

Vulnerabilities for packages: k3d, terraform-provider-sendgrid, dynamic-localpv-provisioner, hey, gitleaks, vt-cli...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: kots, wolfictl, undock, gptscript, kubescape, trufflehog, grype, nuclei, chezmoi, k9s, gitleaks, zarf, filebrowser, syft...

CVE-2026-63728

A flaw was found in Gitleaks. This template injection vulnerability allows an attacker who can influence report templates to read arbitrary environment variables. By leveraging non-hermetic Sprig template functions, attackers can craft malicious report templates to extract sensitive data such as...

CVE-2026-63728

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728

Gitleaks before version 8.30.1 is affected by a template injection vulnerability in the report template feature. Attackers who can supply or influence report templates can leverage non-hermetic Sprig template functions (env, expandenv, getHostByName) to read arbitrary environment variables and ex...

CVE-2026-63728 Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728 Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...

CVE-2026-63728

Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...