trivy-action

Trivy Action GitHub Action for Trivy Table of Contents Usage Scan CI Pipeline Scan CI Pipeline w/ Trivy Config Cache Trivy Setup Scanning a Tarball Using Trivy with templates Using Trivy with GitHub Code Scanning...

BFScan

BFScan Herramienta para el procesamiento inicial de aplicaciones APK / XAPK / APKM / DEX / JAR / WAR. Busca cadenas en el código fuente y los recursos que parezcan URI, rutas o secretos Genera solicitudes HTTP sin procesar y especificaciones OpenAPI basadas en archivos de configuración, anotacion...

botb

Salir de la Caja BOtB BOtB es una herramienta de análisis y explotación de contenedores diseñada para ser utilizada por pentesters e ingenieros, además de ser compatible con CI/CD usando tecnologías CI/CD comunes. ¿Qué hace? BOtB es una herramienta de línea de comandos que te permite: Explotar...

jwt-cracker

jwt-cracker 简单的 HS256、HS384 和 HS512 JWT 令牌暴力破解工具。 仅对弱密钥的 JWT 令牌有效。 建议 ：使用强长密钥或 RS256 令牌。 安装 通过 npm： root@kitploit: npm install --global jwt-cracker 用法 通过命令行： root@kitploit: jwt-cracker -t -a --max -d -f 其中： token ：要破解的完整 HS256-512 JWT 令牌字符串 alphabet...

checkov

...

wrongsecrets-binaries

wrongsecrets-binaries...

Kubernetes Dashboard <1.10.1 - Authentication Bypass

Kubernetes Dashboard before 1.10.1 allows attackers to bypass authentication and use Dashboard's Service Account for reading secrets within the cluster. id: CVE-2018-18264 info: name: Kubernetes Dashboard 1.10.1 - Authentication Bypass author: edoardottt severity: high description: | Kubernetes...

Pre-Auth Takeover of Build Pipelines in GoCD

GoCD contains a critical information disclosure vulnerability whose exploitation allows unauthenticated attackers to leak configuration information including build secrets and encryption keys. id: CVE-2021-43287 info: name: Pre-Auth Takeover of Build Pipelines in GoCD author: dhiyaneshDk severity...

Windmill < 1.603.3 - SQL Injection

Windmill versions 1.276.0 through 1.603.2 contain an authenticated SQL injection vulnerability in the folder owner management endpoint. The addowner API endpoint passes user-supplied input directly into a SQL query without sanitization, enabling JSONB path injection. An authenticated user with...

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-url Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...

conjur

Conjur Maintainability Test Coverage Conjur 为现代基础设施提供秘密管理和应用身份： 机器授权标记语言（MAML） ，一种基于角色的访问策略语言，用于定义系统组件及其角色、权限和元数据 一个 REST Web 服务 ，用于： 管理人类和机器的身份生命周期 在秘密基础设施中组织和搜索角色与数据 使用复杂的权限模型授权对资源的访问 安全地存储秘密并使其可用 集成 贯穿云工具链： 基础设施即服务（IaaS） 配置管理 持续集成与部署（CI/CD） 容器管理与云编排 注意：我们的徽章和社交媒体按钮从不跟踪你。 Getting Started...

cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more Coded with 💙 by edoardottt Share on Twitter! Install • Usage • Get Started • Changelog • Contributing • License Installation 📡 Homebrew root@kitploit: brew install cariddi Snap...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

git-all-secrets

git-all-secrets 关于 git-all-secrets 是一款能够执行以下操作的工具： 克隆某个组织的多个公共/私有 GitHub 仓库并进行扫描， 克隆组织中某个用户的多个公共/私有 GitHub 仓库并进行扫描， 克隆某个组织的单个公共/私有仓库并进行扫描， 克隆某个用户的单个公共/私有仓库并进行扫描， 克隆某个用户的单个公共/秘密 Gist 并进行扫描， 克隆组织中某个团队的所有仓库并进行扫描， 以上全部功能可以一起完成！没错！只需提供组织名称，即可获取该组织的所有秘密。如果你还想获取组织中某个团队的秘密，只需在组织名称旁注明团队名称。 同时支持克隆和扫描 GitHu...

enject

enject 将 .env 机密隐藏，远离 AI 的窥探。 （注意：该项目原先名为 enveil，现已更名为 enject） AI 编码工具（如 Claude Code、Copilot、Cursor 等）可以读取项目目录中的文件，这意味着纯文本格式的 .env 文件就像一颗随时可能引爆的秘密泄露炸弹。这并非理论上的问题。这是一个已知问题，我曾多次遇到（即使在 Claude Code 的 settings.json 中明确告诉 Claude 不要偷看）。enject 通过确保明文的秘密绝不被存储在磁盘上 来解决这个问题。你的 .env...

eviltree

EvilTree A standalone python3 remake of the classic "tree" command with the additional feature of searching for user provided keywords/regex in files, highlighting those that contain matches. Created for two main reasons: While searching for secrets in files of nested directory structures, being...

go-secdump

go-secdump Description Package go-secdump is a tool built to remotely extract hashes from the SAM registry hive as well as LSA secrets and cached hashes from the SECURITY hive without any remote agent and without touching disk. The tool is built on top of the library go-smb and use it to...

go-secdump

go-secdump 描述 go-secdump 是一个用于从 SAM 注册表配置单元远程提取哈希值以及从 SECURITY 配置单元提取 LSA 机密和缓存的哈希值的工具，无需远程代理，也无需接触磁盘。 该工具基于 go-smb 库构建，并利用它与 Windows 远程注册表通信，直接从内存中检索注册表键。 该工具的构建是为了学习经验，并作为概念验证，证明应该能够远程从 SAM 配置单元检索 NT 哈希值、LSA 机密以及域缓存凭据，而无需先将注册表配置单元保存到磁盘，然后再在本地解析它们。 需要克服的主要问题是，SAM 和 SECURITY 配置单元仅可由 NT...

foxguard

foxguard Fast local security scanning for code, secrets, dependencies, and crypto risk. Integrated into 0sec, the open cybersecurity harness...

shhgit

🚨 shhgit is no longer maintained. If you need support or consultation for your secret scanning endeavours, drop me an e-mail [email protected] 🚨 shhgit helps secure forward-thinking development, operations, and security teams by finding secrets across their code before it leads to a security...