KaiMonkey

KaiMonkey - Vulnerable Terraform Infrastructure KaiMonkey provides vulnerable infrastructure as code IaC to help explore and understand common cloud security threats exposed via IaC. Introduction KaiMonkey is an effort to provide a playground of vulnerable infrastructure as code to help analyze &...

PT-2024-8108

Name of the Vulnerable Software and Affected Versions Microsoft Active Directory Certificate Services affected versions not specified Description An elevation-of-privilege issue exists in Microsoft Active Directory Certificate Services. Exploitation of this issue may allow an attacker to elevate...

SSH key cloning problem in OnApp templates

OnApp sells a "complete IaaS platform" for hosting providers to offer virtual servers. Their platform ships with templates disk images for many different operating systems, which it automatically customizes passwords, network settings, etc. when a new virtual server is deployed. During each...