9 matches found
pacu
빠른 참조 도움 받을 곳 : Rhino Security Labs Discord 또는 Stack Overflow 이슈 제출 장소 : https://github.com/RhinoSecurityLabs/pacu/issues 유지 관리 : Rhino Security Labs Pacu란 무엇인가? Pacu는 AWS 환경에 대한 공격적 보안 테스트를 위해 설계된 오픈소스 AWS 익스플로잇 프레임워크입니다. Rhino Security Labs에서 만들고 유지 관리하며, 침투 테스터가 모듈을 사용하여 AWS 계정 내 구성 결함을 쉽게 악용할...
sadcloud
Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...
payloadsallthethings
This is an offensive tool for AWS exploitation. The repository contains a collection of tools and scripts for testing the security of Amazon Web Services AWS environments. The tools include: Pacu: an AWS exploitation framework designed for testing the security of AWS environments Bucket Finder: a...
New Pacu Module: Secret Enumeration in Elastic Beanstalk
The post New Pacu Module: Secret Enumeration in Elastic Beanstalk appeared first on Rhino Security Labs...
Attacking AWS Cognito with Pacu (p2)
The post Attacking AWS Cognito with Pacu p2 appeared first on Rhino Security Labs...
Attacking AWS Cognito with Pacu (p1)
The post Attacking AWS Cognito with Pacu p1 appeared first on Rhino Security Labs...
SCARLETEEL Cryptojacking Campaign Exploiting AWS Fargate in Ongoing Campaign
Cloud environments continue to be at the receiving end of an ongoing advanced attack campaign dubbed SCARLETEEL, with the threat actors now setting their sights on Amazon Web Services AWS Fargate. "Cloud environments are still their primary target, but the tools and techniques used have adapted t...
PayloadsAllTheThings
This repository is an offensive tool for API key and bucket S3 exploitation. It contains tools and exploits for various types of attacks, including CRLF injection, CSRF injection, and API key leaks. The repository includes a variety of scripts and modules for different types of attacks, such as...