cowcloud

CowCloud 一个用于在 AWS 中分发工作负载的无服务器解决方案 CowCloud 最初是为了以分布式方式运行侦察工具和漏洞扫描而创建的；例如，一个用例可能是由漏洞赏金猎人使用。该解决方案旨在让最终用户不必了解在 AWS 中分发工作负载所需的底层工作。CowCloud 为用户提供了一个友好的 Web 界面来查看和创建新任务，这些任务随后由运行在工作节点（EC2 实例）上的 Python 代码消费。预期 Python 代码以及 EC2 AMI 都将被定制。 例如，假设您想要运行 Nmap 扫描。在这种情况下，您只需从 AMI 目录中选择一个 AMI，并更新...

EUVD-2023-1211

Malicious code in bioql PyPI...

Malicious code in terraform-config (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-4782 Terraform Allows Arbitrary File Write During Init Operation

Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the init operation if run on maliciously crafted Terraform configuration. This vulnerability is fixed in Terraform 1.5.7...

CVE-2023-30618

The CVE-2023-30618 issue affects Kitchen-Terraform, where v7.0.0 regressed to print all Terraform output values, including sensitive ones, at the info level during kitchen converge. This is a local-access disclosure risk, since logs on the attacker’s host could contain sensitive data. Affected co...

CVE-2023-30618 Sensitive Terraform Output Values Printed At Info Logging Level In Kitchen-Terraform

Kitchen-Terraform provides a set of Test Kitchen plugins which enable the use of Test Kitchen to converge a Terraform configuration and verify the resulting infrastructure systems with InSpec controls. Kitchen-Terraform v7.0.0 introduced a regression which caused all Terraform output values,...

CVE-2021-40862: Exposure of Sensitive Information to an Unauthorized Actor

HashiCorp Terraform Enterprise up to v202108-1 contained an API endpoint that erroneously disclosed a sensitive URL to authenticated parties, which could be used for privilege escalation or unauthorized modification of a Terraform configuration. Fixed in v202109-1...

Serverless, Real-time Malware Detection: BinaryAlert

BinaryAlert is an open-source serverless AWS pipeline where any file uploaded to an S3 bucket is immediately scanned with a configurable set of YARA rules. An alert will fire as soon as any match is found, giving an incident response team the ability to quickly contain the threat before it spread...