athena

体验全新的渗透测试之旅，尽在 Athena OS 🏅为信息安全专业人士、漏洞赏金猎人、热情的学生和狂热黑客而生🏅 💞 立即获取 Athena OS！ 💞 点击上方 Docker 图标，探索 Athena OS Docker 容器！ 点击上方图标，在 Microsoft Store 应用中探索 Athena OS WSL！ 自动化软件包更新 本仓库中的软件包通过由 nvchecker 驱动的每日 GitHub Actions 工作流自动保持最新。 工作原理 该自动化流程每天运行（也可手动触发），并执行以下步骤： 1. 配置生成 —...

nuclearpond-OFJAAAH

Nuclear Pond V.2 我们分叉了这个项目，以便我们能够继续这个伟大的想法，希望我们能一起改进代码并使其对所有人可用 - @OFJAAAH 要安装 Nuclear Pond，您需要配置后端 terraform 模块。您可以通过运行 terraform apply 或利用 terragrunt 来实现。 它利用 AWS Lambda 作为后端来并行调用 Nuclei 扫描，可以选择将 JSON 发现结果存储在 S3 中以便使用 AWS Athena 进行查询，并且是云中执行扫描最便宜的方式之一。 功能特点 将结果输出到终端、JSON 或 S3 指定线程和并行调用，支持任意批次数量...

nuclearpond

Nuclear Pond Nuclear Pond 用于在云端利用 Nuclei，具备超快的速度、灵活性，并且能以远低于一杯咖啡的成本执行互联网范围的扫描。 它利用 AWS Lambda 作为后端来并行调用 Nuclei 扫描，可选择将 JSON 发现结果存储在 S3 中以便通过 AWS Athena 进行查询，并且是执行云端扫描最经济的方式之一。 特点 将结果输出到终端、JSON 或 S3 以任意数量的批次指定线程和并行调用 像在本地一样指定任何 Nuclei 参数 指定单个目标或从文件读取 运行 HTTP 服务器以接收来自 API 的扫描请求 运行 HTTP 服务器以获取扫描状态 通...

mythic_telegram_profile

Perfil C2 de Telegram para Mythic Telegram proporciona un perfil C2 de Mythic para los agentes Athena y Apollo. Utiliza mensajes privados bot-a-bot de Telegram como transporte y el servicio gRPC Push C2 de Mythic como puente controlador. Arquitectura Athena or Apollo agent bot Telegram Bot API...

CVE-2026-77810

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

CVE-2026-77810

CVE-2026-77810 is a code injection vulnerability in the Neptune connector of aws-athena-query-federation , caused by a Gremlin query passthrough . A user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying compute for the connector, result...

CVE-2026-77810 Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

CVE-2026-77810 Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

EUVD-2026-64067

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

CVE-2026-77810 Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

CVE-2026-77810: Improper Neutralization of Directives in Dynamically Evaluated Code

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

PT-2026-79440

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

CVE-2026-75910

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...

EUVD-2026-63585

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...

CVE-2026-75910 Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...

CVE-2026-75910 Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...

CVE-2026-75910 Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...

CVE-2026-75910

The ClickHouse connector deployment template in Amazon Athena Federated Query (versions before v2026.17.1) has an incorrect privilege assignment: an authenticated remote user can point the connector's connection string at an unrelated AWS Secrets Manager secret and a database endpoint they contro...

CVE-2026-75910: Incorrect Privilege Assignment

Incorrect privilege assignment in the ClickHouse connector deployment template in Amazon Athena Federated Query prior to v2026.17.1 could allow an authenticated remote user to read arbitrary AWS Secrets Manager secrets in the deploying account by pointing the connector's connection string at an...

PT-2026-79118

Name of the Vulnerable Software and Affected Versions Amazon Athena Federated Query ClickHouse connector versions prior to v2026.17.1 Description Incorrect privilege assignment in the deployment template allows an authenticated remote user to read arbitrary AWS Secrets Manager secrets within the...