kubebot

Kubebot A security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform NOTE: I am not actively maintaining this project anymore. I am working on v2 of Kubebot along with a couple other folks which will likely be presented at one of the upcoming security conferences...

kubebot

Kubebot Un Slackbot de test de sécurité construit avec un backend Kubernetes sur Google Cloud Platform NOTE : Je ne maintiens plus activement ce projet. Je travaille sur la v2 de Kubebot avec quelques autres personnes, qui sera probablement présentée lors d'une prochaine conférence de sécurité...

PT-2026-30427

A vulnerability was detected in badlogic pi-mono up to 0.58.4. This issue affects some unknown processing of the file packages/mom/src/slack.ts of the component pi-mom Slack Bot. The manipulation results in authentication bypass using alternate channel. The attack can be executed remotely. The...

CVE-2025-34072: Exposure of Sensitive Information to an Unauthorized Actor

A data exfiltration vulnerability exists in Anthropic’s deprecated Slack Model Context Protocol MCP Server via automatic link unfurling. When an AI agent using the Slack MCP Server processes untrusted data, it can be manipulated to generate messages containing attacker-crafted hyperlinks embeddin...

Malicious code in octoprint-slackbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 682178867398fd74736a42b65dc506b26a7e4c8beb24fc3d555d32813fd20dc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5015 Malicious code in octoprint-slackbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 682178867398fd74736a42b65dc506b26a7e4c8beb24fc3d555d32813fd20dc0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Kubebot: A Kubernetes Based Security Testing Slackbot

PenTestIT RSS Feed About a week ago, I blogged about List of Portable Hardware Devices for Penetration Testing. The tool that I am blogging about today - Kubebot - can be an awesome example and be installed very easily on a Raspberry Pi that you have lying around. Best part is that this is open...