sisu

sisu ⚡ Il tuo AWS, come file system. Questo: root@kitploit: grep -l "AdministratorAccess" iam/users//policies.json Invece di questo: root@kitploit: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query...

s3crets_scanner

S3cret Scanner: Caccia ai segreti caricati su bucket S3 pubblici Il tool S3cret Scanner è progettato per fornire un livello complementare alle Best Practices di sicurezza di Amazon S3 cacciando proattivamente i segreti nei bucket S3 pubblici. Può essere eseguito come attività programmata o...

nuclei-templates

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the which powers the actual scanning engine. This repository stores a...

aws_pwn

AWS pwn Sommario Questa è una raccolta di script scritti malamente per svolgere vari compiti relativi ai penetration test su AWS. Non ti preoccupare se non funziona per te. Potrebbe essere che AWS sia cambiato da quando uno strumento è stato scritto o che il codice faccia schifo. In ogni caso,...

aws_pwn

AWS pwn Summary This is a collection of horribly written scripts for performing various tasks related to penetration testing AWS. Please don't be sad if it doesn't work for you. It might be that AWS has changed since a given tool was written or it might be that the code sux. Either way, please fe...

domain

Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

poro

poro Descrizione Scansiona le risorse accessibili pubblicamente nel tuo ambiente AWS Servizi coperti da questo strumento: AWS ELB API Gateway Bucket S3 Database RDS istanze EC2 Database Redshift Poro controlla anche se un tag specificato è applicato alle risorse pubbliche identificate usando gli...

s3reverse

s3reverse Install go get root@kitploit: $ go get -u github.com/hahwul/s3reverse snap root@kitploit: snap install s3reverse brew...

bucket-stream

🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...

S3BucketList

S3BucketList Cerca, elenca e controlla i bucket S3 trovati nelle richieste di rete mentre navighi. Funzionalità Filtra i bucket S3 Estrae le autorizzazioni ACL Scarica i bucket registrati Gestisci i bucket registrati Registrazione bucket specifica per scheda Rileva bucket non rivendicati / in...

S3-from-csp

S3-from-csp Estrae tutti i bucket S3 dagli header dei report CSP e poi testa le vulnerabilità di upload dei file Installazione root@kitploit: go install github.com/RandomRobbieBF/S3-from-csp@latest Esecuzione root@kitploit: s3fromcsp file.txt...

CVE-2025-10560 Hardcoded cloud credentials in Worksnaps client application binaries expose production cloud resources

Worksnaps before version 1.6.20260201 contains hardcoded cloud credentials and related secret material in the Worksnaps client application binaries. The exposed credentials included AWS access keys, S3 bucket names, and related cloud access information. The originally exposed AWS credentials...

EUVD-2026-9509

ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission...

CVE-2026-22052

ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission...

CVE-2026-22052

ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission...

EUVD-2022-7422

Malicious code in bioql PyPI...

CVE-2024-41806

The Open edX Platform is a learning management platform. Instructors can upload csv files containing learner information to create cohorts in the instructor dashboard. These files are uploaded using the django default storage. With certain storage backends, uploads may become publicly available...

Mass Ransomware Campaign Hits S3 Buckets Using Stolen AWS Keys

Researchers reveal a large-scale ransomware campaign leveraging over 1,200 stolen AWS access keys to encrypt S3 buckets. Learn…...

Delivering Malware Through Abandoned Amazon S3 Buckets

Here's a supply-chain attack just waiting to happen. A group of researchers searched for, and then registered, abandoned Amazon S3 buckets for about $400. These buckets contained software libraries that are still used. Presumably the projects don't realize that they have been abandoned, and still...