layerleak

layerleak Layerleak 是一个只读的 OCI 镜像密钥扫描器。它无需 Docker 守护进程即可解析公共镜像引用，根据 OCI 摘要验证下载的内容，重建层状态，检查已删除的构件和镜像元数据，并返回经过脱敏、带有来源信息的发现结果。 它支持 Docker Hub、GHCR、Quay、GCR、MCR、Amazon ECR Public 以及其他兼容 OCI 的注册表。结果可以保存为 JSON，并持久化到 PostgreSQL 中供捆绑的 API 使用。 文档 OpenAPI 规范 变更日志 安全策略 贡献指南 此开发树记录了...

EDRHunt

EDRHunt EDRHunt 扫描 Windows 服务、驱动、进程、注册表、WMI 以检测已安装的 EDR（端点检测与响应）。了解更多关于 EDRHunt 的信息，请点击这里。 安装 二进制 从发布部分下载最新版本。版本为 windows/amd64 架构构建。 Go 需要在系统上安装 Go。已在 Go1.17+ 上测试。 go install github.com/fourcorelabs/edrhunt/cmd/EDRHunt@master 使用方法 查找已安装的 EDR $ .\EDRHunt.exe scan EDR Detected EDR: Windows Defende...

Aqua Security Trivy 安全漏洞

Aqua Security Trivy is a comprehensive and versatile security scanner from Aqua Security. A security vulnerability exists in Aqua Security Trivy versions prior to 0.51.2, which stems from a potential leak of registry credentials when scanning images from a malicious registry...

Container Security First Steps: Image and Registry Scanning

Learn to secure your containers with image and registry scanning. This article explores key container vulnerabilities, and how to guard against them with cloud security tools like policy-based deployment control...

Extending your FedRAMP Program to Container Infrastructure with the Qualys Cloud Platform

Following the recent release of the FedRAMP Vulnerability Scanning Requirements for Containers, FedRAMP-authorized systems that make use of containers have one month from March 16, 2021 to submit a plan for compliance with the new requirements. Organizations with a need to certify their services...

OSForensics – Digital investigations faster

OSForensics – Digital investigations faster Here there is a new utility called OSForensics, currently it is freely available that I found very useful for conducting a computer forensics. OSForensics can retrieve data about recently accessed applications, documents, media and network shares by...

Adobe InDesign Version Detection

Detects the installed version of Adobe InDesign. The script logs in via smb, searches for Adobe InDesign in the registry and gets the version from SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...