9 matches found
barq
barq barq: AWS 클라우드 사후 침투 프레임워크! 무엇인가요? barq는 실행 중인 AWS 인프라에 대한 공격을 쉽게 수행할 수 있는 사후 침투 프레임워크입니다. 원래 인스턴스 SSH 키페어 없이도 실행 중인 EC2 인스턴스를 공격할 수 있습니다. 또한 AWS에 저장된 Secrets 및 Parameters를 열거하고 추출할 수 있습니다. 사전 요구 사항 기존 AWS 계정 액세스 키 ID와 시크릿 경우에 따라 토큰도 포함 Python 2 또는 3. 둘 다에서 실행 가능합니다. msfvenom 페이로드를 실행하려면...
D3m0n1z3dShell
「😈」D3m0n1z3dShell 소개 Demonized Shell은 리눅스에서 지속성을 위한 고급 도구입니다. 설치 root@kitploit: git clone https://github.com/MatheuZSecurity/D3m0n1z3dShell.git cd D3m0n1z3dShell chmod +x demonizedshell.sh sudo ./demonizedshell.sh 원라인 설치 모든 파일과 함께 D3m0n1z3dShell 다운로드: root@kitploit: curl -L...
CVE-2022-29186
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Rundeck community and rundeck-enterprise docker images contained a pre-generated SSH keypair. If the idrsa.pub public key of the keypair was copied to authorizedkeys files on remote host, those hosts...
D3m0n1z3dShell - Demonized Shell Is An Advanced Tool For Persistence In Linux
Demonized Shell is an Advanced Tool for persistence in linux. Install git clone https://github.com/MatheuZSecurity/D3m0n1z3dShell.git cd D3m0n1z3dShell chmod +x demonizedshell.sh sudo ./demonizedshell.sh One-Liner Install Download D3m0n1z3dShell with all files: curl -L...
CVE-2022-29186
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Rundeck community and rundeck-enterprise docker images contained a pre-generated SSH keypair. If the idrsa.pub public key of the keypair was copied to authorizedkeys files on remote host, those hosts...
Design/Logic Flaw
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Rundeck community and rundeck-enterprise docker images contained a pre-generated SSH keypair. If the idrsa.pub public key of the keypair was copied to authorizedkeys files on remote host, those hosts...
CVE-2022-29186 Use of Hard-coded Cryptographic Key in rundeck/rundeck, rundeckpro/enterprise
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. Rundeck community and rundeck-enterprise docker images contained a pre-generated SSH keypair. If the idrsa.pub public key of the keypair was copied to authorizedkeys files on remote host, those hosts...
CVE-2022-29186
CVE-2022-29186 affects Rundeck Docker images (community and enterprise) versions 4.0 and earlier, where a pre-generated id_rsa.pub SSH keypair was included in the image. If this public key was copied to authorized_keys on a remote host, anyone with the corresponding private key could access those...
