trufflehog-explorer

TruffleHog Explorer 🕵️‍♂️ TruffleHog Explorer へようこそ。TruffleHog を使用して抽出されたデータを可視化・分析するための、ユーザーフレンドリーな Web ベースのツールです。TruffleHog は、秘密情報の発見、分類、検証、分析を行うための最も強力なオープンソースツールのひとつです。ここで「秘密情報」とは、機械が別の機械に対して自身を認証するために使用する認証情報（API キー、データベースパスワード、秘密暗号鍵など）を指します。 改良された...

SMBSR

여기서 멈추세요! 이 도구는 더 이상 유지 관리되지 않습니다! SMBSR과 RSMBI의 기능을 통합하기로 결정했습니다. SMBAT을 참조하세요. SMBSR - 그게 뭔가요? SMBSR은 CIDR/IP/IP파일/호스트명이 주어지면 대상 중에서 SMB 서비스445를 수신 대기 중인 모든 항목을 열거하고 해당 서비스에 대해 인증을 시도하는 Python 스크립트입니다. 인증에 성공하면 모든 폴더와 하위 폴더를 재귀적으로 방문하여 파일 내의 비밀과 ... 비밀 파일을 찾습니다. SMB 포트가 열린 대상을 스캔하기 위해 masscan 모...

Malicious code in @servicetitan/startup (npm)

npm/@servicetitan/startup is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republish...

TruffleHog Explorer - A User-Friendly Web-Based Tool To Visualize And Analyze Data Extracted Using TruffleHog

Welcome to TruffleHog Explorer , a user-friendly web-based tool to visualize and analyze data extracted using TruffleHog. TruffleHog is one of the most powerful secrets discovery, classification, validation, and analysis open source tool. In this context, a secret refers to a credential a machine...

CVE-2025-30066

tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 because they were modified by a threat actor to point at commit 0e58ed8, which contained malicious updateFeatures code...

CVE-2025-30066

tj-actions changed-files before 46 allows remote attackers to discover secrets by reading actions logs. The tags v1 through v45.0.7 were affected on 2025-03-14 and 2025-03-15 because they were modified by a threat actor to point at commit 0e58ed8, which contained malicious updateFeatures code...

CVE-2025-30066

CVE-2025-30066 affects tj-actions/changed-files before 46, where a malicious commit (0e58ed8) was used to alter tags (e.g., v1, v45.0.7) and cause secrets to be read from GitHub Actions logs. Public reports and advisories (CISA, OSV, GHSA) confirm secrets disclosure via runners’ logs in affected ...