73 matches found
CICD-Goat-Vapt-Writeup
CICD-Goat VAPT 渗透测试报告 针对 OWASP CICD-Goat 的完整漏洞评估与渗透测试——一个故意设计为存在漏洞的 CI/CD 环境（Jenkins、Gitea、GitLab、CTFd）——端到端映射至 OWASP Top 10 CI/CD 安全风险 。 🧭 本仓库与其他仓库的关系...
GoAT
GoAT Golang高级木马 是一款用Go编写的木马程序，使用Twitter作为命令控制服务器。GoAT具有一些非常独特且令人印象深刻的功能，包括多线程命令执行和一套复杂的自防御Rootkit模块（用C语言编写）。如果你不熟悉恶意软件，请不要在自己电脑上运行此程序。一旦安装，很难移除。 命令 !echo - 将消息记录到从机控制台 !quit - 关闭GoAT !clear - 不执行任何操作。如果你不想让从机在连接时执行任何命令，请使用此命令。 编译 使用以下命令编译，以隐藏控制台窗口：go build -o GoAT.exe -ldflags "-H windowsgui"...
kubernetes-goat
Kubernetes Goat ✨ The Kubernetes Goat is designed to be an intentionally vulnerable cluster environment to learn and practice Kubernetes security 🚀 🙌 Refer to https://madhuakula.com/kubernetes-goat for the guide 📖 🧰 Setting up Kubernetes Goat Ensure you have admin access to the Kubernetes cluster...
kubernetes-goat
Kubernetes Goat ✨ Kubernetes Goatは、Kubernetesセキュリティを学び練習するために意図的に脆弱性を持たせたクラスタ環境です🚀 🙌 ガイドはhttps://madhuakula.com/kubernetes-goat を参照してください📖 🧰 Kubernetes Goatのセットアップ Kubernetesクラスタの管理者権限があり、kubectlがインストールされていることを確認してください。インストールドキュメントを参照してください。...
Serverless-Goat
简介 感谢您使用 OWASP ServerlessGoat！ 此无服务器应用程序演示了《无服务器安全十大弱点指南》https://github.com/puresec/sas-top-10 中描述的常见无服务器安全缺陷。 创建 ServerlessGoat 旨在实现以下教育目的： 向开发人员和安全从业人员传授常见的无服务器应用层风险与弱点 讲解无服务器应用层弱点如何被利用 向开发人员和安全从业人员传授无服务器安全最佳实践 您可以在以下网址找到有关 WebGoat 的更多信息：https://www.owasp.org/index.php/OWASPServerlessGoat...
cicd-goat
意図的に脆弱性のあるCI/CD環境です。 CI/CDパイプラインをハッキングし、フラグを獲得しましょう。🚩 Cider Security Palo Alto Networksにより買収 によって作成されました。 目次...
CICD-Goat-Vapt-Writeup — Updated!
CICD-Goat VAPT Writeup A full vulnerability assessment & penetration test against OWASP CICD-Goat — a deliberately vulnerable CI/CD environment Jenkins, Gitea, GitLab, CTFd — mapped end-to-end against the OWASP Top 10 CI/CD Security Risks. 🧭 How This Fits With My Other Repos Repository| What's in...
GoAT-X: A Graph of Auditing Thoughts for Securing Token Transactions in Cross-Chain Contracts
Cross-chain bridges, the critical infrastructure of the multi-chain ecosystem, have become a primary target for attackers, resulting in over $2.8 billion in losses due to subtle implementation flaws. Existing defenses, such as bytecode-level static analysis, are ill-equipped to handle the semanti...
EUVD-2025-101446
Malicious code in apparentgoatz3n npm...
EUVD-2025-99693
Malicious code in ytterbicgoatz3n npm...
EUVD-2025-99285
Malicious code in endlessgoatz3n npm...
EUVD-2025-89207
Malicious code in regulatorygoatz3n npm...
MAL-2025-113501 Malicious code in eastern_goat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b5f7a9ca0373319e7ee43e58dcc0a547e697831b7d1da8746af9da9f1374be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-92971
Malicious code in brainygoatz3n npm...
MAL-2025-116677 Malicious code in regulatory_goat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7890caf2f93c9d60cc23a3cbccf2e1b735a3a260e565d2923cba80792ebae693 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-110031 Malicious code in unaware_goat-silentdev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fe53f7fac6c4f7e5e8d53d7c56254faca355db5a191593f5b5a91a03fc54931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-75251
Malicious code in vulnerablegoat-smiletea npm...
Malicious code in breezy_goat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6f3ec6fb4eae7e1d24aba7e1201eb5948ae204d3eebbeeb43ef6495fa39184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-100093 Malicious code in breezy_goat_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6f3ec6fb4eae7e1d24aba7e1201eb5948ae204d3eebbeeb43ef6495fa39184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...