subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

heroku-CVE-2022-44268-reproduction

This repository does not have a README...

terrier

Terrier Terrier 是一款镜像和容器分析工具，可用于扫描 OCI 镜像和容器，根据其哈希值识别并验证特定文件的存在。关于 Terrier 的详细说明可参见 Heroku 博客：https://blog.heroku.com/terrier-open-source-identifying-analyzing-containers。 安装 二进制文件 如需通过二进制文件安装，请访问 发布页面。 通过 Go 安装 $ go get github.com/heroku/terrier 从源码构建 通过 Go $ go build 或 $ make all 用法 $ ./terrier...

flask_heroku_redirector

Flask Heroku C2 Sample Una aplicación de ejemplo simple en Python Flask lista para ejecutarse en Heroku. Configuración de desarrollo virtualenv venv source venv/bin/activate pip install -r requirements.txt python app.py Desplegar heroku create git push heroku master Configuración configurar puert...

tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

heroku-CVE-2013-0156

heroku-CVE-2013-0156 此漏洞已被 CVE-2013-0333 取代。详情请参阅 https://groups.google.com/forum/?fromgroups=!topic/rubyonrails-security/1h2DR63ViGo。 覆盖 CVE-2013-0333 的脚本替代版本可在以下位置找到： https://github.com/heroku/heroku-CVE-2013-0333...

heroku-CVE-2013-0269

heroku-CVE-2013-0269 检查所有 Heroku 应用，确认它们是否运行存在漏洞的 JSON 版本 背景 Ruby JSON gem 中发现了 一个安全漏洞。这是近期公布的 Rails MySQL 注入问题的根本原因。现在已有新版 JSON gem 可用。 开发者可以通过运行 此脚本 获取所有受影响的 Heroku 应用的完整列表。以下 JSON 版本已修复并被视为安全： 1.7.7 1.6.8 1.5.5 如果您不升级，攻击者可能能够在您应用的 MySQL 数据库上执行任意 SQL 查询。Heroku 强烈建议立即升级到已修复的版本。 操作说明 git clone...

heroku-CVE-2013-0333

heroku-CVE-2013-0333 检查所有您的Heroku应用，看它们是否运行着有漏洞的Rails版本 背景 在Ruby on Rails框架中发现了一个严重的安全漏洞。此漏洞影响几乎所有运行Rails 2.3和3.0版本的应用，并且已经提供了补丁。 Rails开发者可以通过运行此脚本来获取所有受影响的Heroku应用的完整列表。以下Rails版本已修补并被认为不受此漏洞影响： 3.0.20 2.3.16 3.2.x 3.1.x 如果您不升级，攻击者可以轻易访问您的应用及其数据，并运行任意代码或命令。Heroku建议立即升级到已修补的版本。 说明 $ git clone...

vulnreport

Abandoned Project This project is not currently maintained and has been abandoned. Vulnreport Pentesting management and automation platform Vulnreport is a platform for managing penetration tests and generating well-formatted, actionable findings reports without the normal overhead that takes up...

PowMix botnet targets Czech workforce

Cisco Talos discovered an ongoing malicious campaign, operating since at least December 2025, affecting a broader workforce in the Czech Republic with a previously undocumented botnet we call "PowMix." PowMix employs randomized command-and-control C2 beaconing intervals, rather than persistent...

EUVD-2021-2433

Malware in sbrugna...

EUVD-2022-6579

Malicious code in bioql PyPI...

Malicious code in buffered-logger-heroku (npm)

The package buffered-logger-heroku was found to contain malicious code...

Malicious code in heroku-sudo (npm)

The package heroku-sudo was found to contain malicious code...

MAL-2025-22399 Malicious code in heroku-sudo (npm)

The package heroku-sudo was found to contain malicious code...

MAL-2025-16305 Malicious code in buffered-logger-heroku (npm)

The package buffered-logger-heroku was found to contain malicious code...

CVE-2020-7634

heroku-addonpool through 0.1.15 is vulnerable to Command Injection...

Malicious code in heroku-tl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a78aff2389300306864bb3d44e1ac70675e128845a4d734dae5ffbc39076b93 Clone of a legit Telegram client, with a hidden code that, under some conditions, can attempt to destroy the Linux OS. --- Category: MALICIOUS - The campaign h...

MAL-2025-2967 Malicious code in heroku-tl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a78aff2389300306864bb3d44e1ac70675e128845a4d734dae5ffbc39076b93 Clone of a legit Telegram client, with a hidden code that, under some conditions, can attempt to destroy the Linux OS. --- Category: MALICIOUS - The campaign h...

A Bootiful Podcast: Heroku's Terence Lee

Hi, Spring fans! Happy Spring Boot 3.4.0 release day to those who celebrate! Today I'm joined by both Terence Lee, from Heroku, and my friend DaShaun Carter, and we talk about platforms, buildpacks, and more. heroku paas buildpacks,...