slurp-1

slurp 黑盒/白盒 S3 存储桶枚举器 概述 感谢所有使此工具成为可能的供应商软件包。 这是一个安全工具；专为渗透测试人员和安全专业人员设计，用于审计 S3 存储桶。 功能 通过域名进行扫描；您可以针对单个域名或域名列表 通过关键词进行扫描；您可以针对单个关键词或关键词列表 通过 AWS 凭证进行扫描；您可以针对自己的 AWS 账户查看哪些存储桶已暴露 彩色输出，便于可视化 grep 目前每个域名和关键词生成超过 28,000 种排列组合（感谢 @jakewarren 和 @random-robbie） Punycode 支持国际化域名 强版权保护许可证（GPLv3） 模式...

checkov

...

cred_scanner

credscanner Un semplice strumento da riga di comando per trovare credenziali AWS nei file. Ottimizzato per l'uso con Jenkins e altri sistemi CI. Sospetto che esistano altri strumenti migliori come git-secrets, ma non ho trovato nulla per eseguire una scansione rapida e sporca che si integri bene...

festin

FestIN il potente cercatore di bucket S3 e scopritore di contenuti Cos'è FestIn Perché Festin Installazione Usando Python Usando Docker Opzioni complete Utilizzo Configurare i domini di ricerca Concorrenza Configurazione del crawler HTTP Gestire i risultati Utilizzo del proxy Opzioni DNS Supporto...

CVE-2026-44578

CVE-2026-44578 — SSRF nell'aggiornamento WebSocket di Next.js Server-Side Request Forgery pre-autenticazione nelle distribuzioni self-hosted di Next.js. Una singola richiesta HTTP appositamente costruita estrae credenziali AWS, segreti e dati di servizi interni da localhost:80...

cve-2013-4660_PoC

Build Docker Faz o build do ambiente vulnerável com Docker. docker build -f cve-2013-4660 -t cve-2013-4660 . Para demonstrar como as informações sensíveis do servidor vazam quando o ataque é bem-sucedido, execute o contêiner injetando um banco de dados fictício, a senha do banco de dados fictício...

autovpn

!CAUTION This repository is no longer being maintained. No further updates, bug fixes, or support will be provided. Please use the new version https://github.com/ttlequals0/autowire Overview Script that allows the easy creation of OpenVPN endpoints in any AWS region. To create a VPN endpoint is...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

cred_scanner

credscanner A simple command line tool for finding AWS credentials in files. Optimized for use with Jenkins and other CI systems. I suspect there are other, better tools out there such as git-secrets, but I couldn't find anything to run a quick and dirty scan that also integrates well with Jenkin...

CVE-2026-54356

CVE-2026-54356 — Budibase: emissione autenticata di URL di upload firmati S3 arbitrari Un utente autenticato con privilegi bassi ruolo BASIC di un workspace Budibase pubblicato può chiamare POST /api/attachments/:datasourceId/url e ottenere un URL di upload pre-firmato S3 firmato con le credenzia...

Malicious code in @servicetitan/measure-sheet-data (npm)

npm/@servicetitan/measure-sheet-data is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized an...

MAL-2026-11720 Malicious code in @or-sdk/pgsql (npm)

npm/@or-sdk/pgsql is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by th...

CVE-2026-58139

Affected software: DuckDB AWS extension for DuckDB. Vulnerability: security policy bypass that lets any database user with SQL execution retrieve plaintext AWS credentials by calling load_aws_credentials with redact_secret=false, bypassing the database-wide allow_unredacted_secrets=false policy. ...

Malicious code in simple-probe-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0457a026ab28fbb641d11e4e9ac9d60d026fd77210972f72e6ac931b4b06c59c On npm install, postinstall.js executes shell commands that query cloud instance metadata services AWS IMDS at 169.254.169.254, plus Tencent, Aliyun,...

CVE-2026-46412

@beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS Identity Server with OpenID Connect support. Between 2026-05-11 20:19 UTC and 22:56 UTC, an attacker used a compromised npm publish token to publish 18 malicious versions of @beproduct/nestjs-auth 0.1.2 through 0.1.19. The...

Malicious code in @across-toolkit/eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7f4d3a8ae39148bf9964aef6bfe64bc57393c27a28d8e953b30c92442c4b33 @across-toolkit/[email protected] runs a postinstall.js script on npm install that harvests installer-side secrets and posts them to a hardcoded...

Malicious code in @across-toolkit/typescript-config (npm)

The npm package @across-toolkit/typescript-config is a dependency-confusion credential stealer targeting developers of Across Protocol across.to. It masquerades as an internal ESLint/TypeScript config for the across.to toolkit and publishes an implausibly high version 99.0.0 so that a misconfigur...

Malicious code in @marketfront/header (npm)

The @marketfront/header package is part of a 25-package malicious campaign batch-published to the @marketfront npm scope by npm user 'marketfront' [email protected] within a roughly 3-minute window on 2026-07-01. All packages in the campaign were published at version 7.0.0 and use...

Malicious code in date-fns-lite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4694a079d83e33dcee7f87140c41737009d9f0b19f351c23f2ae3dbce9a47a51 [email protected] presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs automatically on npm install. T...

Malicious code in log-taker1 (npm)

Malicious npm package published as part of a coordinated DeFi-themed infostealer campaign. log-taker1 embeds a full infostealer 2800 lines directly in index.js, executed at install time via postinstall: node test.js. The payload harvests cryptocurrency wallet vaults MetaMask, Phantom, Solflare,...