63 matches found
S3BucketList
S3BucketList 搜索、列出并检查浏览时网络请求中发现的 S3 Bucket。 功能 过滤 S3 Bucket 提取 ACL 权限 下载已记录的存储桶 管理已记录的存储桶 按标签页记录存储桶 检测未认领 / 挂起 / 易受攻击的存储桶 安装 Chrome 您可以从 Chrome 网上应用店 安装此扩展，或者： 1. 从 最新版本 下载。 2. 解压下载的 zip 文件。 3. 在 Chrome 浏览器右上角，点击三个点。 4. 选择 更多工具 扩展程序，并启用 开发者模式。 5. 点击 加载已解压的扩展程序，然后选择解压后的文件夹。 Firefox 您可以从 Firefox 附加...
nuclei-templates
Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...
domain
Info Recon-ng and Alt-DNS are awesome. This script combines the power of these tools with the ability to run multiple domains within the same session. TLDR; I just want to do my subdomain discovery via ONE command and be done with it. Only 1 module needs an api key /api/googlesite find instructio...
bucket-stream
🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...
poro
poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...
poro
poro 描述 扫描 AWS 环境中公开可访问的资产 本工具覆盖的服务： AWS ELB API Gateway S3 存储桶 RDS 数据库 EC2 实例 Redshift 数据库 Poro 还会检查你指定的标签是否应用于已识别的公开资源，使用 --tag-key 和 --tag-value 参数。 先决条件 具有对上述服务只读权限的 AWS 账号 Python 3.X requests=2.22.0 boto3=1.20 botocore=1.20 enlighten=1 用法 克隆此仓库 使用有效凭证配置环境 - aws configure sso pip install -r...
s3crets_scanner
S3cret Scanner: 在公开S3存储桶中搜寻泄露的秘密 S3cret Scanner 工具旨在为 Amazon S3 安全最佳实践提供补充层，通过在公开S3存储桶中主动搜索秘密。 可作为 计划任务 或 按需 执行 自动化工作流 自动化将执行以下操作： 1. 列出账户中的公开存储桶（设置为 ACL 为 Public 或 对象可公开） 2. 列出文本或敏感文件（即 .p12、.pgp 等） 3. 依次下载、扫描（使用 truffleHog3）并删除磁盘上的文件，完成后逐个评估。 4. 日志将创建在 logger.log 文件中。 先决条件 1. Python 3.6 或更高版本 2...
sisu
sisu ⚡ Tu AWS, como un sistema de archivos. Esto: grep -l "AdministratorAccess" iam/users//policies.json En lugar de esto: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query "AttachedPolicies.PolicyArn" --output...
s3reverse
s3reverse Install go get $ go get -u github.com/hahwul/s3reverse snap snap install s3reverse brew $ brew tap hahwul/s3reverse $ brew install s3reverse Usage Input options Basic Usage 8""""8 eeee 8"""8 8"""" 88 8 8"""" 8"""8 8""""8 8"""" 8 8 8 8 8 88 8 8 8 8 8 8 8eeeee 8 8eee8e 8eeee 88 e8 8eeee...
aws_pwn
AWS pwn 摘要 这组脚本写得很烂，用于执行与AWS渗透测试相关的各种任务。如果它对您不起作用，请不要难过。可能是因为自编写以来AWS已经发生了变化，或者代码本身就很烂。无论如何，欢迎贡献。 这些垃圾大部分由Daniel Grzelak编写，但也有很多贡献，最著名的是Mike Fuller。 需求 pip install -r requirements.txt 请确保还在 /.aws/credentials 中设置好您的AWS凭证。 侦察 用于前期信息收集的任务。 validateiamaccesskeys.py -...
aws_pwn
AWS pwn Summary This is a collection of horribly written scripts for performing various tasks related to penetration testing AWS. Please don't be sad if it doesn't work for you. It might be that AWS has changed since a given tool was written or it might be that the code sux. Either way, please fe...
S3-from-csp
S3-from-csp Extrae todos los buckets S3 de las cabeceras de los informes CSP y luego prueba vulnerabilidades de subida de archivos Instalación go install github.com/RandomRobbieBF/S3-from-csp@latest Ejecución s3fromcsp file.txt...
CVE-2026-63239: Use of Hard-coded Credentials
A hard-coded AWS IAM credentials vulnerability in Koollab LMS allowed an attacker to access shared multi-tenant S3 buckets and SQS queues, exposing sensitive data and enabling malicious content injection, job manipulation, or email interception...
CVE-2025-10560 Hardcoded cloud credentials in Worksnaps client application binaries expose production cloud resources
Worksnaps before version 1.6.20260201 contains hardcoded cloud credentials and related secret material in the Worksnaps client application binaries. The exposed credentials included AWS access keys, S3 bucket names, and related cloud access information. The originally exposed AWS credentials...
EUVD-2026-9509
ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission...
CVE-2026-22052
ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission...
CVE-2026-22052
ONTAP versions 9.12.1 and higher with S3 NAS buckets are susceptible to an information disclosure vulnerability. Successful exploit could allow an authenticated attacker to view a listing of the contents in a directory for which they lack permission...
EUVD-2022-7422
Malicious code in bioql PyPI...
CVE-2024-41806
The Open edX Platform is a learning management platform. Instructors can upload csv files containing learner information to create cohorts in the instructor dashboard. These files are uploaded using the django default storage. With certain storage backends, uploads may become publicly available...
