barq

barq barq: O framework de pós-exploração na nuvem AWS! O que é? barq é um framework de pós-exploração que permite realizar ataques facilmente em uma infraestrutura AWS em execução. Ele permite atacar instâncias EC2 em execução sem ter os pares de chaves SSH originais da instância. Também permite...

Ninja

Aggiornamento rapido per includere lo sfruttamento di Follina 01/06/2022 - NinjaC2 genererà il documento e servirà il payload HTML. Maggiori informazioni: https://www.linkedin.com/posts/ahmed-khlief-499321a7i-just-pushed-a-quick-update-to-ninjac2-to-activity-6937661951007170560-Tmps Ninja V2.2...

chameleon

19 Customizable honeypots for monitoring network traffic, bots activities, and username\password credentials DNS, HTTP Proxy, HTTP, HTTPS, SSH, POP3, IMAP, STMP, RDP, VNC, SMB, SOCKS5, Redis, TELNET, Postgres, MySQL, MSSQL, Elastic and ldap If you want to implement the honeypots in your project,...

metabadger

Metabadger Prevent SSRF attacks on AWS EC2 via automated upgrades to the more secure Instance Metadata Service v2 IMDSv2. Metabadger Purpose and functionality Diagnose and evaluate your current usage of the AWS Instance Metadata Service along with understanding how the service works Prepare you t...

metabadger

Metabadger Previeni gli attacchi SSRF su AWS EC2 tramite aggiornamenti automatici al più sicuro Instance Metadata Service v2 IMDSv2. Metabadger Scopo e funzionalità Diagnosticare e valutare l'uso attuale del AWS Instance Metadata Service, comprendendo come funziona il servizio Prepararti...

cloud

Cloud Monitoraggio del panorama cloud La nostra missione con questo progetto è fornire una mappa sempre aggiornata e liberamente accessibile del panorama cloud per ogni grande fornitore di servizi cloud. Abbiamo deciso di iniziare raccogliendo i dati dei certificati SSL delle macchine AWS EC2 e...

autovpn

!CAUTION Questo repository non è più mantenuto. Non verranno forniti ulteriori aggiornamenti, correzioni di bug o supporto. Si prega di utilizzare la nuova versione https://github.com/ttlequals0/autowire Panoramica Script che permette la facile creazione di endpoint OpenVPN in qualsiasi regione...

CVE-2021-3456

CVE-2021-3456 Una catena pratica che inizia con un innocuo file PDF e termina con una reverse shell su un'istanza AWS EC2 L'Inizio: Creare un Payload PDF Tutto inizia sul fronte dell'attacco. Utilizzando l'oggetto WScript integrato di PowerShell, incorporiamo uno script all'interno di un PDF che...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: q, act, dapr, newrelic-nri-statsd, rancher-helm, kubeflow-pipelines, flux-kustomize-controller, snyk-cli, nri-consul, fuse-overlayfs-snapshotter, jitsucom-bulker, azure-workload-identity-webhook, docker-machine-driver-linode, witness, osv-scanner, haproxy-ingress,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, act, go-discover, flux-kustomize-controller, kargo, snyk-cli, docker-machine-driver-linode, scorecard, witness, osv-scanner, spire-server, zot, grype, syft, crossplane-provider-aws-elasticache, gitlab-pages, argo-cd, wolfictl,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: openbao-k8s, pguser, newrelic-nri-statsd, rancher-helm, kubeflow-pipelines, flux-kustomize-controller, restic, vale, fuse-overlayfs-snapshotter, azure-workload-identity-webhook, docker-machine-driver-linode, scorecard, osv-scanner, cluster-api-gcp-controller, gitness...

Malicious code in zer0onetencent2 (npm)

The zer0onetencent2 package was published to the npm registry by user 't2423048543' maintainer email [email protected]. It is described as 'A simple date formatting utility' but ships no such functionality; index.js only exports a hello stub returning the package name, indicating a package...

Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint

A security vulnerability has been detected in Aider-AI Aider 0.86.3.dev. This affects the function requests.get of the file apidocs.py of the component AWS EC2 Metadata Endpoint. The manipulation leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit...

Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint

A security vulnerability has been detected in Aider-AI Aider 0.86.3.dev. This affects the function requests.get of the file apidocs.py of the component AWS EC2 Metadata Endpoint. The manipulation leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit...

go-witness is Vulnerable to Improper Verification of AWS EC2 Identity Documents

Impact This vulnerability only affects users of the AWS attestor. Users of the AWS attestor could have unknowingly received a forged identity document. While this may seem unlikely, AWS recently issued a security bulletin about IMDS Instance Metadata Service impersonation.^1 There are multiple...

Daas unable to create host connection with error: "URL invalid"

Unable to create a host connection to AWS EC2 and on-premises hypervisors XenServer, VMWare, etc. with invalid URL or authentication failure when a proxy has been configured for the Network Service account...

Ladder v0.0.21 - Server-side request forgery Vulnerability

Exploit Title: Ladder v0.0.21 - Server-side request forgery SSRF Date: 2024-01-20 Exploit Author: @chebuya Software Link: https://github.com/everywall/ladder Version: v0.0.1 - v0.0.21 Tested on: Ubuntu 20.04.6 LTS on AWS EC2 ami-0fd63e471b04e22d0 CVE: CVE-2024-27620 Description: Ladder fails to...

Ladder 0.0.21 Server-Side Request Forgery

Exploit Title: Ladder v0.0.21 Server-side request forgery SSRF Date: 2024-01-20 Exploit Author: @chebuya Software Link: https://github.com/everywall/ladder Version: v0.0.1 - v0.0.21 Tested on: Ubuntu 20.04.6 LTS on AWS EC2 ami-0fd63e471b04e22d0 CVE: CVE-2024-27620 Description: Ladder fails to app...

Indonesian Cybercriminals Exploit AWS for Profitable Crypto Mining Operations

A financially motivated threat actor of Indonesian origin has been observed leveraging Amazon Web Services AWS Elastic Compute Cloud EC2 instances to carry out illicit crypto mining operations. Cloud security company's Permiso P0 Labs, which first detected the group in November 2021, has assigned...

Threat Actors Target AWS EC2 Workloads to Steal Credentials

We found malicious samples attempting to steal Amazon Elastic Compute Cloud EC2 Workloads' access keys and tokens via typosquatting and the abuse of legitimate tools...