tf-cve-2021-36782

Demo Terraform module for CVE-2021-36782 This is a Terraform module to demo CVE-2021-36782. Quick start Clone repository Run terraform init Copy example.tfvars to yourown.tfvars Edit yourown.tfvars. You just need to add a digital ocean API token Run terraform apply -var-file yourown.tfvars Give i...

terragoat

TerraGoat - Vulnerable Terraform Infrastructure...

binaryalert

BinaryAlert: Serverless, Real-Time & Retroactive Malware Detection .. image:: https://travis-ci.org/airbnb/binaryalert.svg?branch=master :target: https://travis-ci.org/airbnb/binaryalert :alt: Build Status .. image:: https://coveralls.io/repos/github/airbnb/binaryalert/badge.svg?branch=master...

log4j-vulnerable-app-cve-2021-44228-terraform

log4j-vulnerable-app-cve-2021-44228-terraform Un Terraform para desplegar una aplicación vulnerable y un JNDIExploit para trabajar con CVE-2021-44228 Acerca de la pila Este terraform crea dos instancias en una VPC en AWS Cloud. Solo necesitas exportar tus AWSACCESSKEYID y AWSSECRETACCESSKEY Una...

Azure_Workshop

Azure Red Team Attack and Detect Workshop This is a vulnerable-by-design Azure lab containing 2 x attack paths with common misconfigurations. These vulnerabilities are intended to represent those found in live production environments and the attack vectors are intended to be as realistic as...

GHSA-92X3-5H48-MFHX vulnerabilities

Vulnerabilities for packages: opentofu, terraform, terraform-mcp-server...

CVE-2026-14978 vulnerabilities

Vulnerabilities for packages: opentofu, terraform, terraform-mcp-server...

CVE-2026-14978 vulnerabilities

Vulnerabilities for packages: helmfile, terraform-ls, terraform, opentofu, opentofu-fips, vault-fips, vault, terraform-fips, terraform-mcp-server...

GHSA-92X3-5H48-MFHX vulnerabilities

Vulnerabilities for packages: helmfile, terraform-ls, terraform, opentofu, opentofu-fips, vault-fips, vault, terraform-fips, terraform-mcp-server...

LOAD

Intro Based on AWS-Redteam-Lab and OCD GOAD The price for running the lab for 125 hours during one month is approximately 14$. With Free Tier you get 750h of EC2 per month, there is 6 machines so 125h. But you only get 30Gb of storage. So you need storage for the other 5 VMs : 30Gb 5 = 150Gb = 14...

domain-protect

OWASP Domain Protect - trasladado OWASP Domain Protect se ha trasladado a terraform-aws-domain-protect OWASP Domain Protect ahora está disponible como un Módulo de Terraform Consulte la documentación de OWASP Domain Protect incluyendo opciones de migración...

cowcloud

CowCloud una solución serverless para distribuir cargas de trabajo en AWS CowCloud se creó originalmente para ejecutar herramientas de reconocimiento y escaneos de vulnerabilidades de forma distribuida; por ejemplo, un caso de uso podría ser el de los cazadores de recompensas por vulnerabilidades...

sadcloud

Sadcloud sadcloud es una herramienta para crear infraestructura AWS insegura con Terraform. Es compatible con aprox. 84 configuraciones incorrectas en 22 servicios de AWS. El conjunto inicial de configuraciones incorrectas se basó en ScoutSuite, la herramienta de auditoría multinube de NCCGroup...

sadcloud

Sadcloud sadcloud is a tool for spinning up insecure AWS infrastructure with Terraform. It supports approx. 84 misconfigurations across 22 AWS Services. The inital set of misconfigurations were drawn from ScoutSuite, NCCGroup's Multi-cloud auditing tool. sadcloud was created to easily allow...

Cowrie and Grafana Honeypot using Terraform on DigitalOcean

Honeypot de Cowrie y Grafana usando Terraform en DigitalOcean Demo Video Tabla de Contenidos Tabla de Contenidos Resumen del Sistema Tecnologías Estructura del Directorio del Proyecto Requisitos de Hardware Instalación y Configuración Gestión del Estado de Terraform Pipeline CI/CD Arquitectura de...

CVE-2026-4660-PoC

CVE-2026-4660 PoC Proof of concept for CVE-2026-4660 HashiCorp advisory in hashicorp/go-getter. I'm the original reporter. An attacker publishes a Terraform module with a ref of --pathspec-from-file=/path/to/file. When the victim runs terraform init, go-getter clones the repo and calls git checko...

log4jtest

Introduction This repository is setup to quickly test the log4j vulnerability using Docker and Hashicorp Terraform. All of the components of this test will run in Docker containers on the Docker network, accessible via 'host.docker.internal'. Credits / Disclaimer This test environment is derived...

Security update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provid

This update for terraform-provider-aws, terraform-provider-azurerm, terraform-provider-external, terraform-provider-google, terraform-provider-helm, terraform-provider-kubernetes, terraform-provider-local, terraform-provider-null, terraform-provider-random, terraform-provider-tls fixes the...

CVE-2026-55108

KubeVela is an open source application delivery platform. Prior to 1.9.14, from 1.10.0-alpha.1 until 1.10.9, and from 1.11.0-alpha.1 until 1.11.0-alpha.4, the Terraform remote configuration loader in pkg/controller/utils/capability.go, GetTerraformConfigurationFromRemote, clones a repository...

KubeVela Terraform remote loader DoS via unbounded file read

Summary KubeVela's Terraform remote configuration loader can be abused to make vela-core read an unbounded byte stream into memory, causing an out-of-memory kill and a control-plane denial of service. The issue is reachable when a user with permission to create or update a core.oam.dev/v1beta1...