461 matches found
s3dns v0.2.26
S3DNS s3dns is a lightweight DNS server that helps uncover cloud storage buckets AWS S3, Google Cloud Storage, and Azure Blob by resolving DNS requests, tracing CNAMEs, and matching known bucket URL patterns. It's a handy companion for pentesters , bug bounty hunters , and cloud security analysts...
MAL-2026-13952 Malicious code in global-intel (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5449036ad6a1bf0ee192023ddb23ea7afefe53da7133ab91f4ffbc6d3253f5dc package.json declares a preinstall hook that runs index.js on npm install. index.js collects host identity and OS files from the installer —...
Malicious code in @years20/n8n-nodes-utils-helper-j (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae821bd0afd5bdf483830eddac1c875d1ec3d229ca2078aa4fe7d88e9573eefb @years20/n8n-nodes-utils-helper-j 1.0.0 runs a postinstall script index.js/callback.js that executes id and hostname on the installer host,...
MAL-2026-13909 Malicious code in @years20/n8n-nodes-utils-helper-a (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53efd1db4158ab9b9fbc01983ff03019e4938eb54329876135b5eb4a0ba927bc The package's postinstall script callback.js and its main module index.js, byte-identical to callback.js execute on both npm install and require. The...
CVE-2026-18348
Missing authorization check in the uploadazure, uploadsftp, and uploadsmb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network...
exploit-development-framework
Exploit Development Framework EDF A modular, educational ex...
pentest-toolkit
Pentest Automation Toolkit A fully open-source pentest automa...
MAL-2026-12815 Malicious code in widget-forge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dc77fe941595018023e8382eac28ffdf8d1b000217a0e4d01e56e7bb48ac2d8 [email protected] is a dependency-confusion beacon. package.json declares scripts.preinstall = 'node callback.js', which auto-runs on npm install...
Malicious code in shiftmarkets-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1628a8b4e8b6c4c117f2a38f7d69664950c1d5758772c64c2225f296f681c29 The package declares a postinstall hook that runs dist/recon.js on npm install. The script collects hostname, username, sudouser, homedir, cwd,...
Malicious code in matlab-azure-devops-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc42778bb54bfdea5784d5dcb68cf43c89def3dbaeddba1d1a6bd2850cb174b The package's preinstall script node index.js auto-executes on npm install and collects host identifiers os.hostname, os.userInfo.username, home...
MAL-2026-12400 Malicious code in matlab-azure-devops-extension (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc42778bb54bfdea5784d5dcb68cf43c89def3dbaeddba1d1a6bd2850cb174b The package's preinstall script node index.js auto-executes on npm install and collects host identifiers os.hostname, os.userInfo.username, home...
MAL-2026-12040 Malicious code in forge-extended (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3784f08ba715b7afbeecfaa10b9c953b4406770c976bd07200977fa2f80b0317 On npm install, the package's preinstall script index.js collects installer-side system data — os.hostname, os.userInfo.username, home directory, DNS...
ctf-writeups
🏴 CTF Writeups & PoC Collection Documented solutions from Hac...
XeroSQL
XeroSQL is a lightweight recon tool for detecting SQL...
claude-pentest
claude-pentest A local pentesting toolkit built for Claude Co...
oxo v2.9.17
OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and fingerprinting. Documentation Agents Store CLI...
oxo v2.9.16
OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and fingerprinting. Documentation Agents Store CLI...
s3dns v0.2.23
S3DNS s3dns is a lightweight DNS server that helps uncover cloud storage buckets AWS S3, Google Cloud Storage, and Azure Blob by resolving DNS requests, tracing CNAMEs, and matching known bucket URL patterns. It's a handy companion for pentesters , bug bounty hunters , and cloud security analysts...
Malicious code in n8n-nodes-task-runner (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991093c97f0d954740c4b72a2e7725a501df211c94634979ebadc52652f2ebe8 The package impersonates the n8n task-runner subsystem but its shipped n8n node MyNode.js is a no-op stub whose execute returns . The real payload...